Jul 15 11:29:49.853632 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Jul 15 10:04:37 -00 2025 Jul 15 11:29:49.853654 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:29:49.853662 kernel: BIOS-provided physical RAM map: Jul 15 11:29:49.853668 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 15 11:29:49.853673 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 15 11:29:49.853679 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 15 11:29:49.853685 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Jul 15 11:29:49.853692 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Jul 15 11:29:49.853701 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 15 11:29:49.853708 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Jul 15 11:29:49.853715 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 15 11:29:49.853723 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 15 11:29:49.853731 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Jul 15 11:29:49.853739 kernel: NX (Execute Disable) protection: active Jul 15 11:29:49.853751 kernel: SMBIOS 2.8 present. Jul 15 11:29:49.853759 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Jul 15 11:29:49.853765 kernel: Hypervisor detected: KVM Jul 15 11:29:49.853770 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 15 11:29:49.853776 kernel: kvm-clock: cpu 0, msr 5819b001, primary cpu clock Jul 15 11:29:49.853782 kernel: kvm-clock: using sched offset of 2449526552 cycles Jul 15 11:29:49.853789 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 15 11:29:49.853797 kernel: tsc: Detected 2794.750 MHz processor Jul 15 11:29:49.853804 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 15 11:29:49.853812 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 15 11:29:49.853818 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Jul 15 11:29:49.853824 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 15 11:29:49.853830 kernel: Using GB pages for direct mapping Jul 15 11:29:49.853836 kernel: ACPI: Early table checksum verification disabled Jul 15 11:29:49.853842 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Jul 15 11:29:49.853848 kernel: ACPI: RSDT 0x000000009CFE241A 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:29:49.853854 kernel: ACPI: FACP 0x000000009CFE21FA 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:29:49.853860 kernel: ACPI: DSDT 0x000000009CFE0040 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:29:49.853870 kernel: ACPI: FACS 0x000000009CFE0000 000040 Jul 15 11:29:49.853876 kernel: ACPI: APIC 0x000000009CFE22EE 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:29:49.853882 kernel: ACPI: HPET 0x000000009CFE237E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:29:49.853888 kernel: ACPI: MCFG 0x000000009CFE23B6 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:29:49.853894 kernel: ACPI: WAET 0x000000009CFE23F2 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:29:49.853900 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21fa-0x9cfe22ed] Jul 15 11:29:49.853906 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21f9] Jul 15 11:29:49.853912 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Jul 15 11:29:49.853921 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22ee-0x9cfe237d] Jul 15 11:29:49.853930 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe237e-0x9cfe23b5] Jul 15 11:29:49.853938 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23b6-0x9cfe23f1] Jul 15 11:29:49.853947 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23f2-0x9cfe2419] Jul 15 11:29:49.853956 kernel: No NUMA configuration found Jul 15 11:29:49.853966 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Jul 15 11:29:49.853977 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Jul 15 11:29:49.853986 kernel: Zone ranges: Jul 15 11:29:49.853994 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 15 11:29:49.854002 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Jul 15 11:29:49.854009 kernel: Normal empty Jul 15 11:29:49.854015 kernel: Movable zone start for each node Jul 15 11:29:49.854024 kernel: Early memory node ranges Jul 15 11:29:49.854033 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 15 11:29:49.854041 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Jul 15 11:29:49.854050 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Jul 15 11:29:49.854056 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:29:49.854063 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 15 11:29:49.854069 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Jul 15 11:29:49.854076 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 15 11:29:49.854082 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 15 11:29:49.854088 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 15 11:29:49.854095 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 15 11:29:49.854101 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 15 11:29:49.854108 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 15 11:29:49.854115 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 15 11:29:49.854122 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 15 11:29:49.854128 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 15 11:29:49.854134 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 15 11:29:49.854141 kernel: TSC deadline timer available Jul 15 11:29:49.854147 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 15 11:29:49.854153 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 15 11:29:49.854160 kernel: kvm-guest: setup PV sched yield Jul 15 11:29:49.854166 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Jul 15 11:29:49.854173 kernel: Booting paravirtualized kernel on KVM Jul 15 11:29:49.854180 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 15 11:29:49.854186 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 15 11:29:49.854193 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 15 11:29:49.854199 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 15 11:29:49.854205 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 15 11:29:49.854212 kernel: kvm-guest: setup async PF for cpu 0 Jul 15 11:29:49.854218 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Jul 15 11:29:49.854224 kernel: kvm-guest: PV spinlocks enabled Jul 15 11:29:49.854232 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 15 11:29:49.854238 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Jul 15 11:29:49.854244 kernel: Policy zone: DMA32 Jul 15 11:29:49.854252 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:29:49.854259 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:29:49.854265 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 15 11:29:49.854272 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:29:49.854278 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:29:49.854288 kernel: Memory: 2436696K/2571752K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 134796K reserved, 0K cma-reserved) Jul 15 11:29:49.854297 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 15 11:29:49.854304 kernel: ftrace: allocating 34607 entries in 136 pages Jul 15 11:29:49.854310 kernel: ftrace: allocated 136 pages with 2 groups Jul 15 11:29:49.854317 kernel: rcu: Hierarchical RCU implementation. Jul 15 11:29:49.854324 kernel: rcu: RCU event tracing is enabled. Jul 15 11:29:49.854331 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 15 11:29:49.854337 kernel: Rude variant of Tasks RCU enabled. Jul 15 11:29:49.854345 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:29:49.854354 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:29:49.854363 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 15 11:29:49.854372 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 15 11:29:49.854381 kernel: random: crng init done Jul 15 11:29:49.854391 kernel: Console: colour VGA+ 80x25 Jul 15 11:29:49.854400 kernel: printk: console [ttyS0] enabled Jul 15 11:29:49.854408 kernel: ACPI: Core revision 20210730 Jul 15 11:29:49.854416 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 15 11:29:49.854424 kernel: APIC: Switch to symmetric I/O mode setup Jul 15 11:29:49.854432 kernel: x2apic enabled Jul 15 11:29:49.854438 kernel: Switched APIC routing to physical x2apic. Jul 15 11:29:49.854445 kernel: kvm-guest: setup PV IPIs Jul 15 11:29:49.854451 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 15 11:29:49.854458 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 15 11:29:49.854464 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Jul 15 11:29:49.854471 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 15 11:29:49.854478 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 15 11:29:49.854484 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 15 11:29:49.854496 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 15 11:29:49.854504 kernel: Spectre V2 : Mitigation: Retpolines Jul 15 11:29:49.854510 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 15 11:29:49.854518 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 15 11:29:49.854540 kernel: RETBleed: Mitigation: untrained return thunk Jul 15 11:29:49.854547 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 15 11:29:49.854554 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 15 11:29:49.854561 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 15 11:29:49.854568 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 15 11:29:49.854577 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 15 11:29:49.854584 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 15 11:29:49.854598 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 15 11:29:49.854605 kernel: Freeing SMP alternatives memory: 32K Jul 15 11:29:49.854612 kernel: pid_max: default: 32768 minimum: 301 Jul 15 11:29:49.854619 kernel: LSM: Security Framework initializing Jul 15 11:29:49.854627 kernel: SELinux: Initializing. Jul 15 11:29:49.854634 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:29:49.854643 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:29:49.854650 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 15 11:29:49.854657 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 15 11:29:49.854664 kernel: ... version: 0 Jul 15 11:29:49.854670 kernel: ... bit width: 48 Jul 15 11:29:49.854677 kernel: ... generic registers: 6 Jul 15 11:29:49.854684 kernel: ... value mask: 0000ffffffffffff Jul 15 11:29:49.854691 kernel: ... max period: 00007fffffffffff Jul 15 11:29:49.854698 kernel: ... fixed-purpose events: 0 Jul 15 11:29:49.854706 kernel: ... event mask: 000000000000003f Jul 15 11:29:49.854713 kernel: signal: max sigframe size: 1776 Jul 15 11:29:49.854720 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:29:49.854726 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:29:49.854733 kernel: x86: Booting SMP configuration: Jul 15 11:29:49.854740 kernel: .... node #0, CPUs: #1 Jul 15 11:29:49.854747 kernel: kvm-clock: cpu 1, msr 5819b041, secondary cpu clock Jul 15 11:29:49.854753 kernel: kvm-guest: setup async PF for cpu 1 Jul 15 11:29:49.854760 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Jul 15 11:29:49.854768 kernel: #2 Jul 15 11:29:49.854775 kernel: kvm-clock: cpu 2, msr 5819b081, secondary cpu clock Jul 15 11:29:49.854781 kernel: kvm-guest: setup async PF for cpu 2 Jul 15 11:29:49.854788 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Jul 15 11:29:49.854795 kernel: #3 Jul 15 11:29:49.854802 kernel: kvm-clock: cpu 3, msr 5819b0c1, secondary cpu clock Jul 15 11:29:49.854808 kernel: kvm-guest: setup async PF for cpu 3 Jul 15 11:29:49.854815 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Jul 15 11:29:49.854822 kernel: smp: Brought up 1 node, 4 CPUs Jul 15 11:29:49.854831 kernel: smpboot: Max logical packages: 1 Jul 15 11:29:49.854837 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Jul 15 11:29:49.854844 kernel: devtmpfs: initialized Jul 15 11:29:49.854851 kernel: x86/mm: Memory block size: 128MB Jul 15 11:29:49.854858 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:29:49.854865 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 15 11:29:49.854872 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:29:49.854879 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:29:49.854886 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:29:49.854894 kernel: audit: type=2000 audit(1752578989.309:1): state=initialized audit_enabled=0 res=1 Jul 15 11:29:49.854900 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:29:49.854908 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 15 11:29:49.854914 kernel: cpuidle: using governor menu Jul 15 11:29:49.854921 kernel: ACPI: bus type PCI registered Jul 15 11:29:49.854928 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:29:49.854935 kernel: dca service started, version 1.12.1 Jul 15 11:29:49.854942 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 15 11:29:49.854949 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 15 11:29:49.854959 kernel: PCI: Using configuration type 1 for base access Jul 15 11:29:49.854967 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 15 11:29:49.854974 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:29:49.854981 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:29:49.854988 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:29:49.854994 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:29:49.855002 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:29:49.855009 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:29:49.855018 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:29:49.855028 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:29:49.855037 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:29:49.855047 kernel: ACPI: Interpreter enabled Jul 15 11:29:49.855057 kernel: ACPI: PM: (supports S0 S3 S5) Jul 15 11:29:49.855066 kernel: ACPI: Using IOAPIC for interrupt routing Jul 15 11:29:49.855075 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 15 11:29:49.855083 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 15 11:29:49.855091 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 15 11:29:49.855346 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:29:49.855429 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 15 11:29:49.855498 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 15 11:29:49.855510 kernel: PCI host bridge to bus 0000:00 Jul 15 11:29:49.855621 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 15 11:29:49.855689 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 15 11:29:49.855752 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 15 11:29:49.855834 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 15 11:29:49.855901 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 15 11:29:49.855960 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Jul 15 11:29:49.856020 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 15 11:29:49.856106 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 15 11:29:49.856182 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 15 11:29:49.856251 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Jul 15 11:29:49.856327 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Jul 15 11:29:49.856408 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Jul 15 11:29:49.856491 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 15 11:29:49.856581 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 15 11:29:49.856661 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Jul 15 11:29:49.856732 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Jul 15 11:29:49.856801 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Jul 15 11:29:49.856886 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 15 11:29:49.856966 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Jul 15 11:29:49.857053 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Jul 15 11:29:49.857143 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Jul 15 11:29:49.857219 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 15 11:29:49.857295 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Jul 15 11:29:49.857367 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Jul 15 11:29:49.857444 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Jul 15 11:29:49.857553 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Jul 15 11:29:49.857644 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 15 11:29:49.857722 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 15 11:29:49.857816 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 15 11:29:49.857884 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Jul 15 11:29:49.857953 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Jul 15 11:29:49.858026 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 15 11:29:49.858092 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Jul 15 11:29:49.858102 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 15 11:29:49.858109 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 15 11:29:49.858116 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 15 11:29:49.858123 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 15 11:29:49.858130 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 15 11:29:49.858140 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 15 11:29:49.858146 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 15 11:29:49.858153 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 15 11:29:49.858160 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 15 11:29:49.858167 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 15 11:29:49.858173 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 15 11:29:49.858180 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 15 11:29:49.858187 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 15 11:29:49.858193 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 15 11:29:49.858201 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 15 11:29:49.858208 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 15 11:29:49.858215 kernel: iommu: Default domain type: Translated Jul 15 11:29:49.858222 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 15 11:29:49.858290 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 15 11:29:49.858356 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 15 11:29:49.858422 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 15 11:29:49.858432 kernel: vgaarb: loaded Jul 15 11:29:49.858439 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:29:49.858451 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:29:49.858458 kernel: PTP clock support registered Jul 15 11:29:49.858466 kernel: PCI: Using ACPI for IRQ routing Jul 15 11:29:49.858472 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 15 11:29:49.858479 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 15 11:29:49.858486 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Jul 15 11:29:49.858492 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 15 11:29:49.858500 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 15 11:29:49.858509 kernel: clocksource: Switched to clocksource kvm-clock Jul 15 11:29:49.858519 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:29:49.858545 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:29:49.858554 kernel: pnp: PnP ACPI init Jul 15 11:29:49.858654 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 15 11:29:49.858671 kernel: pnp: PnP ACPI: found 6 devices Jul 15 11:29:49.858682 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 15 11:29:49.858690 kernel: NET: Registered PF_INET protocol family Jul 15 11:29:49.858698 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 15 11:29:49.858708 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 15 11:29:49.858715 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:29:49.858722 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:29:49.858729 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 15 11:29:49.858736 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 15 11:29:49.858742 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:29:49.858749 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:29:49.858756 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:29:49.858763 kernel: NET: Registered PF_XDP protocol family Jul 15 11:29:49.858832 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 15 11:29:49.858898 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 15 11:29:49.859002 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 15 11:29:49.859101 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 15 11:29:49.859188 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 15 11:29:49.859261 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Jul 15 11:29:49.859274 kernel: PCI: CLS 0 bytes, default 64 Jul 15 11:29:49.859282 kernel: Initialise system trusted keyrings Jul 15 11:29:49.859292 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 15 11:29:49.859299 kernel: Key type asymmetric registered Jul 15 11:29:49.859305 kernel: Asymmetric key parser 'x509' registered Jul 15 11:29:49.859312 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:29:49.859319 kernel: io scheduler mq-deadline registered Jul 15 11:29:49.859326 kernel: io scheduler kyber registered Jul 15 11:29:49.859335 kernel: io scheduler bfq registered Jul 15 11:29:49.859344 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 15 11:29:49.859353 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 15 11:29:49.859366 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 15 11:29:49.859376 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 15 11:29:49.859386 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:29:49.859395 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 15 11:29:49.859403 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 15 11:29:49.859410 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 15 11:29:49.859417 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 15 11:29:49.859491 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 15 11:29:49.859501 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 15 11:29:49.859583 kernel: rtc_cmos 00:04: registered as rtc0 Jul 15 11:29:49.859655 kernel: rtc_cmos 00:04: setting system clock to 2025-07-15T11:29:49 UTC (1752578989) Jul 15 11:29:49.859753 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 15 11:29:49.859770 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:29:49.859781 kernel: Segment Routing with IPv6 Jul 15 11:29:49.859791 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:29:49.859801 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:29:49.859809 kernel: Key type dns_resolver registered Jul 15 11:29:49.859821 kernel: IPI shorthand broadcast: enabled Jul 15 11:29:49.859831 kernel: sched_clock: Marking stable (400274504, 99412428)->(729389234, -229702302) Jul 15 11:29:49.859840 kernel: registered taskstats version 1 Jul 15 11:29:49.859848 kernel: Loading compiled-in X.509 certificates Jul 15 11:29:49.859858 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: c4b3a19d3bd6de5654dc12075428550cf6251289' Jul 15 11:29:49.859866 kernel: Key type .fscrypt registered Jul 15 11:29:49.859873 kernel: Key type fscrypt-provisioning registered Jul 15 11:29:49.859880 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:29:49.859886 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:29:49.859895 kernel: ima: No architecture policies found Jul 15 11:29:49.859901 kernel: clk: Disabling unused clocks Jul 15 11:29:49.859908 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 15 11:29:49.859915 kernel: Write protecting the kernel read-only data: 28672k Jul 15 11:29:49.859922 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 15 11:29:49.859929 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 15 11:29:49.859936 kernel: Run /init as init process Jul 15 11:29:49.859942 kernel: with arguments: Jul 15 11:29:49.859949 kernel: /init Jul 15 11:29:49.859957 kernel: with environment: Jul 15 11:29:49.859963 kernel: HOME=/ Jul 15 11:29:49.859970 kernel: TERM=linux Jul 15 11:29:49.859976 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:29:49.859986 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:29:49.859995 systemd[1]: Detected virtualization kvm. Jul 15 11:29:49.860002 systemd[1]: Detected architecture x86-64. Jul 15 11:29:49.860009 systemd[1]: Running in initrd. Jul 15 11:29:49.860017 systemd[1]: No hostname configured, using default hostname. Jul 15 11:29:49.860025 systemd[1]: Hostname set to . Jul 15 11:29:49.860034 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:29:49.860042 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:29:49.860050 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:29:49.860059 systemd[1]: Reached target cryptsetup.target. Jul 15 11:29:49.860066 systemd[1]: Reached target paths.target. Jul 15 11:29:49.860073 systemd[1]: Reached target slices.target. Jul 15 11:29:49.860082 systemd[1]: Reached target swap.target. Jul 15 11:29:49.860095 systemd[1]: Reached target timers.target. Jul 15 11:29:49.860104 systemd[1]: Listening on iscsid.socket. Jul 15 11:29:49.860111 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:29:49.860119 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:29:49.860127 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:29:49.860135 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:29:49.860142 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:29:49.860150 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:29:49.860157 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:29:49.860165 systemd[1]: Reached target sockets.target. Jul 15 11:29:49.860172 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:29:49.860179 systemd[1]: Finished network-cleanup.service. Jul 15 11:29:49.860187 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:29:49.860195 systemd[1]: Starting systemd-journald.service... Jul 15 11:29:49.860203 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:29:49.860211 systemd[1]: Starting systemd-resolved.service... Jul 15 11:29:49.860219 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:29:49.860226 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:29:49.860233 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:29:49.860241 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:29:49.860252 systemd-journald[198]: Journal started Jul 15 11:29:49.860291 systemd-journald[198]: Runtime Journal (/run/log/journal/7cceff0d43e44e22b0b0b0c0b9194673) is 6.0M, max 48.5M, 42.5M free. Jul 15 11:29:49.860536 systemd[1]: Started systemd-journald.service. Jul 15 11:29:49.861661 systemd-modules-load[199]: Inserted module 'overlay' Jul 15 11:29:49.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.874425 systemd-resolved[200]: Positive Trust Anchors: Jul 15 11:29:49.899714 kernel: audit: type=1130 audit(1752578989.891:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.899734 kernel: audit: type=1130 audit(1752578989.895:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.874435 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:29:49.904900 kernel: audit: type=1130 audit(1752578989.899:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.874470 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:29:49.914335 kernel: audit: type=1130 audit(1752578989.904:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.876951 systemd-resolved[200]: Defaulting to hostname 'linux'. Jul 15 11:29:49.892404 systemd[1]: Started systemd-resolved.service. Jul 15 11:29:49.895914 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:29:49.900195 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:29:49.905376 systemd[1]: Reached target nss-lookup.target. Jul 15 11:29:49.915628 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:29:49.926538 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:29:49.928960 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:29:49.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.931501 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:29:49.935994 kernel: audit: type=1130 audit(1752578989.930:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.936015 kernel: Bridge firewalling registered Jul 15 11:29:49.934424 systemd-modules-load[199]: Inserted module 'br_netfilter' Jul 15 11:29:49.941476 dracut-cmdline[216]: dracut-dracut-053 Jul 15 11:29:49.943826 dracut-cmdline[216]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:29:49.951543 kernel: SCSI subsystem initialized Jul 15 11:29:49.962861 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:29:49.962883 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:29:49.964091 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:29:49.966758 systemd-modules-load[199]: Inserted module 'dm_multipath' Jul 15 11:29:49.967375 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:29:49.972143 kernel: audit: type=1130 audit(1752578989.967:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.968638 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:29:49.976844 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:29:49.981470 kernel: audit: type=1130 audit(1752578989.976:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:49.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:50.011550 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:29:50.029552 kernel: iscsi: registered transport (tcp) Jul 15 11:29:50.049772 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:29:50.049801 kernel: QLogic iSCSI HBA Driver Jul 15 11:29:50.075916 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:29:50.080224 kernel: audit: type=1130 audit(1752578990.075:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:50.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:50.080258 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:29:50.130595 kernel: raid6: avx2x4 gen() 22857 MB/s Jul 15 11:29:50.147607 kernel: raid6: avx2x4 xor() 5848 MB/s Jul 15 11:29:50.164600 kernel: raid6: avx2x2 gen() 25958 MB/s Jul 15 11:29:50.181602 kernel: raid6: avx2x2 xor() 16757 MB/s Jul 15 11:29:50.198602 kernel: raid6: avx2x1 gen() 23860 MB/s Jul 15 11:29:50.215607 kernel: raid6: avx2x1 xor() 12520 MB/s Jul 15 11:29:50.232614 kernel: raid6: sse2x4 gen() 13788 MB/s Jul 15 11:29:50.249599 kernel: raid6: sse2x4 xor() 5460 MB/s Jul 15 11:29:50.266594 kernel: raid6: sse2x2 gen() 15471 MB/s Jul 15 11:29:50.283597 kernel: raid6: sse2x2 xor() 8031 MB/s Jul 15 11:29:50.300602 kernel: raid6: sse2x1 gen() 10628 MB/s Jul 15 11:29:50.318133 kernel: raid6: sse2x1 xor() 7297 MB/s Jul 15 11:29:50.318205 kernel: raid6: using algorithm avx2x2 gen() 25958 MB/s Jul 15 11:29:50.318216 kernel: raid6: .... xor() 16757 MB/s, rmw enabled Jul 15 11:29:50.318997 kernel: raid6: using avx2x2 recovery algorithm Jul 15 11:29:50.332559 kernel: xor: automatically using best checksumming function avx Jul 15 11:29:50.428554 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 15 11:29:50.435710 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:29:50.440008 kernel: audit: type=1130 audit(1752578990.435:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:50.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:50.439000 audit: BPF prog-id=7 op=LOAD Jul 15 11:29:50.439000 audit: BPF prog-id=8 op=LOAD Jul 15 11:29:50.440291 systemd[1]: Starting systemd-udevd.service... Jul 15 11:29:50.452165 systemd-udevd[401]: Using default interface naming scheme 'v252'. Jul 15 11:29:50.456859 systemd[1]: Started systemd-udevd.service. Jul 15 11:29:50.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:50.457854 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:29:50.468778 dracut-pre-trigger[403]: rd.md=0: removing MD RAID activation Jul 15 11:29:50.492206 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:29:50.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:50.493109 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:29:50.525553 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:29:50.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:50.553631 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 15 11:29:50.559470 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 15 11:29:50.559482 kernel: GPT:9289727 != 19775487 Jul 15 11:29:50.559491 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 15 11:29:50.559499 kernel: GPT:9289727 != 19775487 Jul 15 11:29:50.559507 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 15 11:29:50.559515 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:29:50.563688 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:29:50.567550 kernel: libata version 3.00 loaded. Jul 15 11:29:50.576241 kernel: AVX2 version of gcm_enc/dec engaged. Jul 15 11:29:50.576317 kernel: AES CTR mode by8 optimization enabled Jul 15 11:29:50.583560 kernel: ahci 0000:00:1f.2: version 3.0 Jul 15 11:29:50.587687 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 15 11:29:50.587702 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 15 11:29:50.587787 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 15 11:29:50.587861 kernel: scsi host0: ahci Jul 15 11:29:50.587950 kernel: scsi host1: ahci Jul 15 11:29:50.588038 kernel: scsi host2: ahci Jul 15 11:29:50.588119 kernel: scsi host3: ahci Jul 15 11:29:50.588200 kernel: scsi host4: ahci Jul 15 11:29:50.588298 kernel: scsi host5: ahci Jul 15 11:29:50.588379 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Jul 15 11:29:50.588388 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Jul 15 11:29:50.588398 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Jul 15 11:29:50.588408 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Jul 15 11:29:50.588417 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Jul 15 11:29:50.588425 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Jul 15 11:29:50.595548 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (451) Jul 15 11:29:50.602201 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:29:50.640677 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:29:50.643207 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:29:50.643446 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:29:50.648233 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:29:50.652270 systemd[1]: Starting disk-uuid.service... Jul 15 11:29:50.894863 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 15 11:29:50.894940 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 15 11:29:50.894950 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 15 11:29:50.896553 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 15 11:29:50.897553 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 15 11:29:50.898542 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 15 11:29:50.899551 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 15 11:29:50.899568 kernel: ata3.00: applying bridge limits Jul 15 11:29:50.900741 kernel: ata3.00: configured for UDMA/100 Jul 15 11:29:50.901548 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 15 11:29:50.934588 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 15 11:29:50.952353 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 15 11:29:50.952372 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 15 11:29:51.491159 disk-uuid[527]: Primary Header is updated. Jul 15 11:29:51.491159 disk-uuid[527]: Secondary Entries is updated. Jul 15 11:29:51.491159 disk-uuid[527]: Secondary Header is updated. Jul 15 11:29:51.495556 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:29:51.498548 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:29:52.582545 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:29:52.582654 disk-uuid[547]: The operation has completed successfully. Jul 15 11:29:52.606316 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:29:52.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:52.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:52.606422 systemd[1]: Finished disk-uuid.service. Jul 15 11:29:52.616405 systemd[1]: Starting verity-setup.service... Jul 15 11:29:52.630742 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 15 11:29:52.653263 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:29:52.656181 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:29:52.658130 systemd[1]: Finished verity-setup.service. Jul 15 11:29:52.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:52.756558 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:29:52.756962 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:29:52.758544 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 15 11:29:52.760582 systemd[1]: Starting ignition-setup.service... Jul 15 11:29:52.762470 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:29:52.768951 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:29:52.768978 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:29:52.768988 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:29:52.776667 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:29:52.822245 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:29:52.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:52.823000 audit: BPF prog-id=9 op=LOAD Jul 15 11:29:52.824358 systemd[1]: Starting systemd-networkd.service... Jul 15 11:29:52.842477 systemd-networkd[713]: lo: Link UP Jul 15 11:29:52.842486 systemd-networkd[713]: lo: Gained carrier Jul 15 11:29:52.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:52.842896 systemd-networkd[713]: Enumeration completed Jul 15 11:29:52.842977 systemd[1]: Started systemd-networkd.service. Jul 15 11:29:52.843092 systemd-networkd[713]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:29:52.843965 systemd[1]: Reached target network.target. Jul 15 11:29:52.844792 systemd-networkd[713]: eth0: Link UP Jul 15 11:29:52.844796 systemd-networkd[713]: eth0: Gained carrier Jul 15 11:29:52.846511 systemd[1]: Starting iscsiuio.service... Jul 15 11:29:52.855948 systemd[1]: Started iscsiuio.service. Jul 15 11:29:52.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:52.856852 systemd[1]: Starting iscsid.service... Jul 15 11:29:52.859076 iscsid[718]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:29:52.859076 iscsid[718]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:29:52.859076 iscsid[718]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:29:52.859076 iscsid[718]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:29:52.859076 iscsid[718]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:29:52.859076 iscsid[718]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:29:52.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:52.860103 systemd[1]: Started iscsid.service. Jul 15 11:29:52.865899 systemd-networkd[713]: eth0: DHCPv4 address 10.0.0.56/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:29:52.866429 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:29:52.882688 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:29:52.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:52.890969 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:29:52.892109 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:29:52.893731 systemd[1]: Reached target remote-fs.target. Jul 15 11:29:52.896160 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:29:52.904277 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:29:52.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:53.198770 systemd-resolved[200]: Detected conflict on linux IN A 10.0.0.56 Jul 15 11:29:53.198784 systemd-resolved[200]: Hostname conflict, changing published hostname from 'linux' to 'linux5'. Jul 15 11:29:53.391013 systemd[1]: Finished ignition-setup.service. Jul 15 11:29:53.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:53.392690 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:29:53.431296 ignition[733]: Ignition 2.14.0 Jul 15 11:29:53.431305 ignition[733]: Stage: fetch-offline Jul 15 11:29:53.431350 ignition[733]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:29:53.431358 ignition[733]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:29:53.431442 ignition[733]: parsed url from cmdline: "" Jul 15 11:29:53.431445 ignition[733]: no config URL provided Jul 15 11:29:53.431449 ignition[733]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:29:53.431454 ignition[733]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:29:53.431474 ignition[733]: op(1): [started] loading QEMU firmware config module Jul 15 11:29:53.431478 ignition[733]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 15 11:29:53.435134 ignition[733]: op(1): [finished] loading QEMU firmware config module Jul 15 11:29:53.477907 ignition[733]: parsing config with SHA512: ae7b3aaa8245d4d17cd6739c4c8001e72a6c47c0e10ece259de5fcfc89bfaa5044d7b4aff60dc4cdb43227c0a73184e56385f8e093e2706ab990c6ddb56d0264 Jul 15 11:29:53.484740 unknown[733]: fetched base config from "system" Jul 15 11:29:53.484752 unknown[733]: fetched user config from "qemu" Jul 15 11:29:53.487211 ignition[733]: fetch-offline: fetch-offline passed Jul 15 11:29:53.488103 ignition[733]: Ignition finished successfully Jul 15 11:29:53.489705 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:29:53.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:53.491471 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:29:53.493831 systemd[1]: Starting ignition-kargs.service... Jul 15 11:29:53.502528 ignition[741]: Ignition 2.14.0 Jul 15 11:29:53.502538 ignition[741]: Stage: kargs Jul 15 11:29:53.502618 ignition[741]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:29:53.502626 ignition[741]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:29:53.506352 ignition[741]: kargs: kargs passed Jul 15 11:29:53.506389 ignition[741]: Ignition finished successfully Jul 15 11:29:53.508463 systemd[1]: Finished ignition-kargs.service. Jul 15 11:29:53.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:53.509996 systemd[1]: Starting ignition-disks.service... Jul 15 11:29:53.516912 ignition[747]: Ignition 2.14.0 Jul 15 11:29:53.516919 ignition[747]: Stage: disks Jul 15 11:29:53.516994 ignition[747]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:29:53.517001 ignition[747]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:29:53.520574 ignition[747]: disks: disks passed Jul 15 11:29:53.520608 ignition[747]: Ignition finished successfully Jul 15 11:29:53.522293 systemd[1]: Finished ignition-disks.service. Jul 15 11:29:53.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:53.522819 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:29:53.524101 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:29:53.525832 systemd[1]: Reached target local-fs.target. Jul 15 11:29:53.527088 systemd[1]: Reached target sysinit.target. Jul 15 11:29:53.528451 systemd[1]: Reached target basic.target. Jul 15 11:29:53.530770 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:29:53.541691 systemd-fsck[756]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 15 11:29:53.546945 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:29:53.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:53.547822 systemd[1]: Mounting sysroot.mount... Jul 15 11:29:53.555170 systemd[1]: Mounted sysroot.mount. Jul 15 11:29:53.556423 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:29:53.555468 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:29:53.558008 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:29:53.558622 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:29:53.558663 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:29:53.558684 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:29:53.565582 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:29:53.566956 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:29:53.571781 initrd-setup-root[766]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:29:53.575864 initrd-setup-root[774]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:29:53.578627 initrd-setup-root[782]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:29:53.581860 initrd-setup-root[790]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:29:53.603749 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:29:53.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:53.604667 systemd[1]: Starting ignition-mount.service... Jul 15 11:29:53.606235 systemd[1]: Starting sysroot-boot.service... Jul 15 11:29:53.611339 bash[807]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:29:53.617863 ignition[808]: INFO : Ignition 2.14.0 Jul 15 11:29:53.617863 ignition[808]: INFO : Stage: mount Jul 15 11:29:53.619663 ignition[808]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:29:53.619663 ignition[808]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:29:53.619663 ignition[808]: INFO : mount: mount passed Jul 15 11:29:53.619663 ignition[808]: INFO : Ignition finished successfully Jul 15 11:29:53.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:53.619400 systemd[1]: Finished ignition-mount.service. Jul 15 11:29:53.630596 systemd[1]: Finished sysroot-boot.service. Jul 15 11:29:53.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:53.666535 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:29:53.673541 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (817) Jul 15 11:29:53.673565 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:29:53.675281 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:29:53.675295 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:29:53.679115 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:29:53.680637 systemd[1]: Starting ignition-files.service... Jul 15 11:29:53.693883 ignition[837]: INFO : Ignition 2.14.0 Jul 15 11:29:53.693883 ignition[837]: INFO : Stage: files Jul 15 11:29:53.695506 ignition[837]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:29:53.695506 ignition[837]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:29:53.695506 ignition[837]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:29:53.698908 ignition[837]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:29:53.698908 ignition[837]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:29:53.701416 ignition[837]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:29:53.702723 ignition[837]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:29:53.704338 unknown[837]: wrote ssh authorized keys file for user: core Jul 15 11:29:53.705319 ignition[837]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:29:53.706869 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 15 11:29:53.708638 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Jul 15 11:29:53.757560 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:29:53.923536 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 15 11:29:53.925681 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:29:53.927551 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:29:54.099160 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:29:54.100943 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:29:54.102560 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:29:54.104228 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:29:54.105851 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:29:54.107516 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:29:54.109243 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:29:54.110928 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:29:54.112550 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:29:54.114828 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:29:54.117304 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:29:54.119284 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Jul 15 11:29:54.231710 systemd-networkd[713]: eth0: Gained IPv6LL Jul 15 11:29:54.679928 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 15 11:29:55.064051 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:29:55.064051 ignition[837]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:29:55.069353 ignition[837]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:29:55.091403 ignition[837]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:29:55.091403 ignition[837]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:29:55.091403 ignition[837]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:29:55.091403 ignition[837]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:29:55.091403 ignition[837]: INFO : files: files passed Jul 15 11:29:55.091403 ignition[837]: INFO : Ignition finished successfully Jul 15 11:29:55.117931 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 15 11:29:55.117960 kernel: audit: type=1130 audit(1752578995.091:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.117979 kernel: audit: type=1130 audit(1752578995.102:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.117989 kernel: audit: type=1130 audit(1752578995.107:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.117999 kernel: audit: type=1131 audit(1752578995.107:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.089174 systemd[1]: Finished ignition-files.service. Jul 15 11:29:55.092406 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:29:55.098131 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:29:55.121986 initrd-setup-root-after-ignition[861]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 15 11:29:55.098743 systemd[1]: Starting ignition-quench.service... Jul 15 11:29:55.124312 initrd-setup-root-after-ignition[863]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:29:55.100346 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:29:55.102979 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:29:55.103035 systemd[1]: Finished ignition-quench.service. Jul 15 11:29:55.108500 systemd[1]: Reached target ignition-complete.target. Jul 15 11:29:55.117178 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:29:55.138218 kernel: audit: type=1130 audit(1752578995.130:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.138240 kernel: audit: type=1131 audit(1752578995.130:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.128740 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:29:55.128833 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:29:55.130537 systemd[1]: Reached target initrd-fs.target. Jul 15 11:29:55.138220 systemd[1]: Reached target initrd.target. Jul 15 11:29:55.139017 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:29:55.139662 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:29:55.150571 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:29:55.155542 kernel: audit: type=1130 audit(1752578995.150:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.152083 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:29:55.159978 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:29:55.160896 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:29:55.162488 systemd[1]: Stopped target timers.target. Jul 15 11:29:55.164038 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:29:55.169855 kernel: audit: type=1131 audit(1752578995.165:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.164132 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:29:55.165649 systemd[1]: Stopped target initrd.target. Jul 15 11:29:55.169930 systemd[1]: Stopped target basic.target. Jul 15 11:29:55.171419 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:29:55.173003 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:29:55.174585 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:29:55.176238 systemd[1]: Stopped target remote-fs.target. Jul 15 11:29:55.177826 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:29:55.179480 systemd[1]: Stopped target sysinit.target. Jul 15 11:29:55.180965 systemd[1]: Stopped target local-fs.target. Jul 15 11:29:55.182508 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:29:55.184066 systemd[1]: Stopped target swap.target. Jul 15 11:29:55.191240 kernel: audit: type=1131 audit(1752578995.186:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.185533 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:29:55.185638 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:29:55.197334 kernel: audit: type=1131 audit(1752578995.192:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.187179 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:29:55.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.191284 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:29:55.191375 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:29:55.193123 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:29:55.193207 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:29:55.197465 systemd[1]: Stopped target paths.target. Jul 15 11:29:55.198987 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:29:55.202564 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:29:55.204199 systemd[1]: Stopped target slices.target. Jul 15 11:29:55.205962 systemd[1]: Stopped target sockets.target. Jul 15 11:29:55.207582 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:29:55.207654 systemd[1]: Closed iscsid.socket. Jul 15 11:29:55.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.208960 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:29:55.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.209024 systemd[1]: Closed iscsiuio.socket. Jul 15 11:29:55.210391 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:29:55.210489 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:29:55.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.212193 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:29:55.212274 systemd[1]: Stopped ignition-files.service. Jul 15 11:29:55.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.222187 ignition[878]: INFO : Ignition 2.14.0 Jul 15 11:29:55.222187 ignition[878]: INFO : Stage: umount Jul 15 11:29:55.222187 ignition[878]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:29:55.222187 ignition[878]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:29:55.222187 ignition[878]: INFO : umount: umount passed Jul 15 11:29:55.222187 ignition[878]: INFO : Ignition finished successfully Jul 15 11:29:55.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.214328 systemd[1]: Stopping ignition-mount.service... Jul 15 11:29:55.215791 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:29:55.216462 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:29:55.216611 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:29:55.218752 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:29:55.218865 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:29:55.222427 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:29:55.222536 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:29:55.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.224714 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:29:55.224781 systemd[1]: Stopped ignition-mount.service. Jul 15 11:29:55.226432 systemd[1]: Stopped target network.target. Jul 15 11:29:55.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.228265 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:29:55.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.228302 systemd[1]: Stopped ignition-disks.service. Jul 15 11:29:55.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.230067 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:29:55.230098 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:29:55.231960 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:29:55.232003 systemd[1]: Stopped ignition-setup.service. Jul 15 11:29:55.232922 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:29:55.234583 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:29:55.236864 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:29:55.238555 systemd-networkd[713]: eth0: DHCPv6 lease lost Jul 15 11:29:55.259000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:29:55.240411 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:29:55.240496 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:29:55.243673 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:29:55.243702 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:29:55.245121 systemd[1]: Stopping network-cleanup.service... Jul 15 11:29:55.245867 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:29:55.245914 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:29:55.247515 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:29:55.247583 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:29:55.249318 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:29:55.249349 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:29:55.250375 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:29:55.266838 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:29:55.271815 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:29:55.272827 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:29:55.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.275001 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:29:55.276013 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:29:55.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.278409 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:29:55.278456 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:29:55.279000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:29:55.281165 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:29:55.281202 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:29:55.283771 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:29:55.283809 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:29:55.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.286575 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:29:55.286611 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:29:55.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.288977 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:29:55.289009 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:29:55.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.292039 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:29:55.293798 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 15 11:29:55.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.293856 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 15 11:29:55.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.296163 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:29:55.296195 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:29:55.297813 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:29:55.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.297845 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:29:55.299391 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 15 11:29:55.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.299858 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:29:55.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:55.299930 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:29:55.301534 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:29:55.301611 systemd[1]: Stopped network-cleanup.service. Jul 15 11:29:55.303363 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:29:55.303427 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:29:55.305106 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:29:55.307420 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:29:55.307462 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:29:55.308799 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:29:55.324242 systemd[1]: Switching root. Jul 15 11:29:55.343224 iscsid[718]: iscsid shutting down. Jul 15 11:29:55.343976 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Jul 15 11:29:55.344015 systemd-journald[198]: Journal stopped Jul 15 11:29:58.193607 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:29:58.193665 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:29:58.193682 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:29:58.193694 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:29:58.193708 kernel: SELinux: policy capability open_perms=1 Jul 15 11:29:58.193727 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:29:58.193740 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:29:58.193758 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:29:58.193769 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:29:58.193782 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:29:58.193793 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:29:58.193807 systemd[1]: Successfully loaded SELinux policy in 37.599ms. Jul 15 11:29:58.193824 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.539ms. Jul 15 11:29:58.193839 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:29:58.193849 systemd[1]: Detected virtualization kvm. Jul 15 11:29:58.193859 systemd[1]: Detected architecture x86-64. Jul 15 11:29:58.193869 systemd[1]: Detected first boot. Jul 15 11:29:58.193880 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:29:58.193893 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:29:58.193904 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:29:58.193915 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:29:58.193926 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:29:58.193938 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:29:58.193950 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:29:58.193961 systemd[1]: Stopped iscsiuio.service. Jul 15 11:29:58.193973 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:29:58.193983 systemd[1]: Stopped iscsid.service. Jul 15 11:29:58.193993 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:29:58.194003 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:29:58.194013 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:29:58.194024 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:29:58.194034 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:29:58.194044 systemd[1]: Created slice system-getty.slice. Jul 15 11:29:58.194055 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:29:58.194066 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:29:58.194076 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:29:58.194086 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:29:58.194096 systemd[1]: Created slice user.slice. Jul 15 11:29:58.194106 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:29:58.194117 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:29:58.194128 systemd[1]: Set up automount boot.automount. Jul 15 11:29:58.194138 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:29:58.194149 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:29:58.194159 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:29:58.194171 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:29:58.194180 systemd[1]: Reached target integritysetup.target. Jul 15 11:29:58.194190 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:29:58.194201 systemd[1]: Reached target remote-fs.target. Jul 15 11:29:58.194211 systemd[1]: Reached target slices.target. Jul 15 11:29:58.194221 systemd[1]: Reached target swap.target. Jul 15 11:29:58.194231 systemd[1]: Reached target torcx.target. Jul 15 11:29:58.194242 systemd[1]: Reached target veritysetup.target. Jul 15 11:29:58.194252 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:29:58.194262 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:29:58.194272 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:29:58.194283 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:29:58.194293 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:29:58.194303 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:29:58.194314 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:29:58.194324 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:29:58.194336 systemd[1]: Mounting media.mount... Jul 15 11:29:58.194346 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:58.194364 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:29:58.194375 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:29:58.194384 systemd[1]: Mounting tmp.mount... Jul 15 11:29:58.194396 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:29:58.194406 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:29:58.194416 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:29:58.194427 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:29:58.194438 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:29:58.194448 systemd[1]: Starting modprobe@drm.service... Jul 15 11:29:58.194458 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:29:58.194468 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:29:58.194478 systemd[1]: Starting modprobe@loop.service... Jul 15 11:29:58.194488 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:29:58.194499 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:29:58.194508 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:29:58.194535 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:29:58.194548 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:29:58.194558 kernel: loop: module loaded Jul 15 11:29:58.194568 kernel: fuse: init (API version 7.34) Jul 15 11:29:58.194578 systemd[1]: Stopped systemd-journald.service. Jul 15 11:29:58.194588 systemd[1]: Starting systemd-journald.service... Jul 15 11:29:58.194598 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:29:58.194608 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:29:58.194618 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:29:58.194630 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:29:58.194640 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:29:58.194651 systemd[1]: Stopped verity-setup.service. Jul 15 11:29:58.194662 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:58.194674 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:29:58.194687 systemd-journald[993]: Journal started Jul 15 11:29:58.194726 systemd-journald[993]: Runtime Journal (/run/log/journal/7cceff0d43e44e22b0b0b0c0b9194673) is 6.0M, max 48.5M, 42.5M free. Jul 15 11:29:55.399000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:29:55.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:29:55.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:29:55.920000 audit: BPF prog-id=10 op=LOAD Jul 15 11:29:55.920000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:29:55.920000 audit: BPF prog-id=11 op=LOAD Jul 15 11:29:55.920000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:29:55.950000 audit[912]: AVC avc: denied { associate } for pid=912 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:29:55.950000 audit[912]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001078e4 a1=c00002ae40 a2=c000029080 a3=32 items=0 ppid=895 pid=912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:55.950000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:29:55.952000 audit[912]: AVC avc: denied { associate } for pid=912 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:29:55.952000 audit[912]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001079b9 a2=1ed a3=0 items=2 ppid=895 pid=912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:55.952000 audit: CWD cwd="/" Jul 15 11:29:55.952000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:55.952000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:55.952000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:29:58.064000 audit: BPF prog-id=12 op=LOAD Jul 15 11:29:58.064000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:29:58.064000 audit: BPF prog-id=13 op=LOAD Jul 15 11:29:58.065000 audit: BPF prog-id=14 op=LOAD Jul 15 11:29:58.065000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:29:58.065000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:29:58.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.074000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:29:58.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.175000 audit: BPF prog-id=15 op=LOAD Jul 15 11:29:58.175000 audit: BPF prog-id=16 op=LOAD Jul 15 11:29:58.175000 audit: BPF prog-id=17 op=LOAD Jul 15 11:29:58.175000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:29:58.175000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:29:58.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.192000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:29:58.192000 audit[993]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffda78af220 a2=4000 a3=7ffda78af2bc items=0 ppid=1 pid=993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.192000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:29:58.062949 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:29:55.949530 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:29:58.062962 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 15 11:29:55.949716 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:29:58.065960 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:29:55.949732 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:29:55.949757 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:29:55.949766 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:29:55.949788 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:29:55.949799 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:29:55.949970 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:29:55.950000 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:29:55.950011 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:29:55.950508 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:29:55.950557 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:29:55.950574 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:29:55.950586 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:29:55.950600 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:29:55.950612 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:55Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:29:57.769552 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:57Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:29:57.769787 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:57Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:29:57.769872 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:57Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:29:57.770457 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:57Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:29:57.770549 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:57Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:29:57.770618 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:29:57Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:29:58.197619 systemd[1]: Started systemd-journald.service. Jul 15 11:29:58.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.198120 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:29:58.198966 systemd[1]: Mounted media.mount. Jul 15 11:29:58.199720 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:29:58.200559 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:29:58.201413 systemd[1]: Mounted tmp.mount. Jul 15 11:29:58.202311 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:29:58.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.203329 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:29:58.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.204328 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:29:58.204453 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:29:58.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.205724 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:29:58.205924 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:29:58.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.207311 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:29:58.207499 systemd[1]: Finished modprobe@drm.service. Jul 15 11:29:58.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.208699 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:29:58.208844 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:29:58.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.209907 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:29:58.210060 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:29:58.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.211120 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:29:58.211233 systemd[1]: Finished modprobe@loop.service. Jul 15 11:29:58.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.212249 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:29:58.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.213311 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:29:58.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.214437 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:29:58.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.215717 systemd[1]: Reached target network-pre.target. Jul 15 11:29:58.217697 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:29:58.219239 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:29:58.220379 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:29:58.221578 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:29:58.223403 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:29:58.224574 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:29:58.225467 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:29:58.226716 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:29:58.227604 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:29:58.229940 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:29:58.232306 systemd-journald[993]: Time spent on flushing to /var/log/journal/7cceff0d43e44e22b0b0b0c0b9194673 is 19.529ms for 1093 entries. Jul 15 11:29:58.232306 systemd-journald[993]: System Journal (/var/log/journal/7cceff0d43e44e22b0b0b0c0b9194673) is 8.0M, max 195.6M, 187.6M free. Jul 15 11:29:58.271233 systemd-journald[993]: Received client request to flush runtime journal. Jul 15 11:29:58.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.232756 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:29:58.271869 udevadm[1015]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 15 11:29:58.235777 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:29:58.237615 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:29:58.239840 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:29:58.241103 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:29:58.242754 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:29:58.246629 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:29:58.248996 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:29:58.252042 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:29:58.267457 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:29:58.271950 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:29:58.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.649366 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:29:58.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.650000 audit: BPF prog-id=18 op=LOAD Jul 15 11:29:58.650000 audit: BPF prog-id=19 op=LOAD Jul 15 11:29:58.650000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:29:58.650000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:29:58.651545 systemd[1]: Starting systemd-udevd.service... Jul 15 11:29:58.666454 systemd-udevd[1020]: Using default interface naming scheme 'v252'. Jul 15 11:29:58.678596 systemd[1]: Started systemd-udevd.service. Jul 15 11:29:58.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.680000 audit: BPF prog-id=20 op=LOAD Jul 15 11:29:58.682923 systemd[1]: Starting systemd-networkd.service... Jul 15 11:29:58.691000 audit: BPF prog-id=21 op=LOAD Jul 15 11:29:58.691000 audit: BPF prog-id=22 op=LOAD Jul 15 11:29:58.691000 audit: BPF prog-id=23 op=LOAD Jul 15 11:29:58.692500 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:29:58.705020 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 15 11:29:58.719777 systemd[1]: Started systemd-userdbd.service. Jul 15 11:29:58.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.728222 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:29:58.744562 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 15 11:29:58.753555 kernel: ACPI: button: Power Button [PWRF] Jul 15 11:29:58.770210 systemd-networkd[1030]: lo: Link UP Jul 15 11:29:58.770219 systemd-networkd[1030]: lo: Gained carrier Jul 15 11:29:58.770951 systemd-networkd[1030]: Enumeration completed Jul 15 11:29:58.771055 systemd[1]: Started systemd-networkd.service. Jul 15 11:29:58.771516 systemd-networkd[1030]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:29:58.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.759000 audit[1025]: AVC avc: denied { confidentiality } for pid=1025 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 15 11:29:58.773159 systemd-networkd[1030]: eth0: Link UP Jul 15 11:29:58.759000 audit[1025]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=560daf4c7a00 a1=338ac a2=7efdfcfc8bc5 a3=5 items=110 ppid=1020 pid=1025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.759000 audit: CWD cwd="/" Jul 15 11:29:58.759000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=1 name=(null) inode=15805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=2 name=(null) inode=15805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=3 name=(null) inode=15806 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=4 name=(null) inode=15805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=5 name=(null) inode=15807 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=6 name=(null) inode=15805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=7 name=(null) inode=15808 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=8 name=(null) inode=15808 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=9 name=(null) inode=15809 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=10 name=(null) inode=15808 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=11 name=(null) inode=15810 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=12 name=(null) inode=15808 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=13 name=(null) inode=15811 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=14 name=(null) inode=15808 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=15 name=(null) inode=15812 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=16 name=(null) inode=15808 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=17 name=(null) inode=15813 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.773162 systemd-networkd[1030]: eth0: Gained carrier Jul 15 11:29:58.759000 audit: PATH item=18 name=(null) inode=15805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=19 name=(null) inode=15814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=20 name=(null) inode=15814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=21 name=(null) inode=15815 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=22 name=(null) inode=15814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=23 name=(null) inode=15816 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=24 name=(null) inode=15814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=25 name=(null) inode=15817 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=26 name=(null) inode=15814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=27 name=(null) inode=15818 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=28 name=(null) inode=15814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=29 name=(null) inode=15819 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=30 name=(null) inode=15805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=31 name=(null) inode=15820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=32 name=(null) inode=15820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=33 name=(null) inode=15821 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=34 name=(null) inode=15820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=35 name=(null) inode=15822 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=36 name=(null) inode=15820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=37 name=(null) inode=15823 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=38 name=(null) inode=15820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=39 name=(null) inode=15824 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=40 name=(null) inode=15820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=41 name=(null) inode=15825 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=42 name=(null) inode=15805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=43 name=(null) inode=15826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=44 name=(null) inode=15826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=45 name=(null) inode=15827 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=46 name=(null) inode=15826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=47 name=(null) inode=15828 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=48 name=(null) inode=15826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=49 name=(null) inode=15829 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=50 name=(null) inode=15826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=51 name=(null) inode=15830 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=52 name=(null) inode=15826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=53 name=(null) inode=15831 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=55 name=(null) inode=15832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=56 name=(null) inode=15832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=57 name=(null) inode=15833 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=58 name=(null) inode=15832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=59 name=(null) inode=15834 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=60 name=(null) inode=15832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=61 name=(null) inode=15835 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=62 name=(null) inode=15835 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=63 name=(null) inode=15836 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=64 name=(null) inode=15835 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=65 name=(null) inode=15837 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=66 name=(null) inode=15835 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=67 name=(null) inode=15838 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=68 name=(null) inode=15835 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=69 name=(null) inode=15839 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=70 name=(null) inode=15835 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=71 name=(null) inode=15840 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=72 name=(null) inode=15832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=73 name=(null) inode=15841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=74 name=(null) inode=15841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=75 name=(null) inode=15842 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=76 name=(null) inode=15841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=77 name=(null) inode=15843 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=78 name=(null) inode=15841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=79 name=(null) inode=15844 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=80 name=(null) inode=15841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=81 name=(null) inode=15845 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=82 name=(null) inode=15841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=83 name=(null) inode=15846 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=84 name=(null) inode=15832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=85 name=(null) inode=15847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=86 name=(null) inode=15847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=87 name=(null) inode=15848 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=88 name=(null) inode=15847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=89 name=(null) inode=15849 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=90 name=(null) inode=15847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=91 name=(null) inode=15850 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=92 name=(null) inode=15847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=93 name=(null) inode=15851 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=94 name=(null) inode=15847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=95 name=(null) inode=15852 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=96 name=(null) inode=15832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=97 name=(null) inode=15853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=98 name=(null) inode=15853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=99 name=(null) inode=15854 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=100 name=(null) inode=15853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=101 name=(null) inode=15855 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=102 name=(null) inode=15853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=103 name=(null) inode=15856 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=104 name=(null) inode=15853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=105 name=(null) inode=15857 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=106 name=(null) inode=15853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=107 name=(null) inode=15858 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PATH item=109 name=(null) inode=15859 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:58.759000 audit: PROCTITLE proctitle="(udev-worker)" Jul 15 11:29:58.787571 systemd-networkd[1030]: eth0: DHCPv4 address 10.0.0.56/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:29:58.797543 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 15 11:29:58.800942 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 15 11:29:58.801211 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 15 11:29:58.802547 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 15 11:29:58.804554 kernel: mousedev: PS/2 mouse device common for all mice Jul 15 11:29:58.847771 kernel: kvm: Nested Virtualization enabled Jul 15 11:29:58.847853 kernel: SVM: kvm: Nested Paging enabled Jul 15 11:29:58.849128 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 15 11:29:58.849165 kernel: SVM: Virtual GIF supported Jul 15 11:29:58.865537 kernel: EDAC MC: Ver: 3.0.0 Jul 15 11:29:58.891953 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:29:58.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.894015 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:29:58.907576 lvm[1056]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:29:58.935703 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:29:58.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.936918 systemd[1]: Reached target cryptsetup.target. Jul 15 11:29:58.939289 systemd[1]: Starting lvm2-activation.service... Jul 15 11:29:58.943643 lvm[1057]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:29:58.971658 systemd[1]: Finished lvm2-activation.service. Jul 15 11:29:58.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:58.972850 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:29:58.973768 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:29:58.973802 systemd[1]: Reached target local-fs.target. Jul 15 11:29:58.974684 systemd[1]: Reached target machines.target. Jul 15 11:29:58.977047 systemd[1]: Starting ldconfig.service... Jul 15 11:29:58.978109 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:29:58.978167 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:29:58.979287 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:29:58.981123 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:29:58.983341 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:29:58.985577 systemd[1]: Starting systemd-sysext.service... Jul 15 11:29:58.986589 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1059 (bootctl) Jul 15 11:29:58.987914 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:29:58.991885 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:29:58.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.000248 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:29:59.004373 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:29:59.004559 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:29:59.019553 kernel: loop0: detected capacity change from 0 to 229808 Jul 15 11:29:59.025417 systemd-fsck[1066]: fsck.fat 4.2 (2021-01-31) Jul 15 11:29:59.025417 systemd-fsck[1066]: /dev/vda1: 790 files, 120725/258078 clusters Jul 15 11:29:59.028405 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:29:59.031231 systemd[1]: Mounting boot.mount... Jul 15 11:29:59.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.050827 systemd[1]: Mounted boot.mount. Jul 15 11:29:59.496567 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:29:59.497266 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:29:59.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.509572 kernel: loop1: detected capacity change from 0 to 229808 Jul 15 11:29:59.514431 (sd-sysext)[1072]: Using extensions 'kubernetes'. Jul 15 11:29:59.514729 (sd-sysext)[1072]: Merged extensions into '/usr'. Jul 15 11:29:59.528976 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:59.530331 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:29:59.531494 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.532460 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:29:59.534841 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:29:59.537051 systemd[1]: Starting modprobe@loop.service... Jul 15 11:29:59.538075 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.538234 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:29:59.538356 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:59.540867 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:29:59.541912 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:29:59.542027 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:29:59.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.543179 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:29:59.543279 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:29:59.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.544437 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:29:59.544560 systemd[1]: Finished modprobe@loop.service. Jul 15 11:29:59.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.545711 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:29:59.545803 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.546705 systemd[1]: Finished systemd-sysext.service. Jul 15 11:29:59.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.548697 systemd[1]: Starting ensure-sysext.service... Jul 15 11:29:59.550354 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:29:59.555294 systemd[1]: Reloading. Jul 15 11:29:59.608888 systemd-tmpfiles[1079]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:29:59.609797 systemd-tmpfiles[1079]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:29:59.611133 systemd-tmpfiles[1079]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:29:59.614765 /usr/lib/systemd/system-generators/torcx-generator[1099]: time="2025-07-15T11:29:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:29:59.614799 /usr/lib/systemd/system-generators/torcx-generator[1099]: time="2025-07-15T11:29:59Z" level=info msg="torcx already run" Jul 15 11:29:59.615499 ldconfig[1058]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:29:59.796991 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:29:59.797011 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:29:59.813951 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:29:59.863000 audit: BPF prog-id=24 op=LOAD Jul 15 11:29:59.863000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:29:59.865000 audit: BPF prog-id=25 op=LOAD Jul 15 11:29:59.865000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:29:59.865000 audit: BPF prog-id=26 op=LOAD Jul 15 11:29:59.865000 audit: BPF prog-id=27 op=LOAD Jul 15 11:29:59.865000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:29:59.865000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:29:59.866000 audit: BPF prog-id=28 op=LOAD Jul 15 11:29:59.866000 audit: BPF prog-id=29 op=LOAD Jul 15 11:29:59.866000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:29:59.866000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:29:59.867000 audit: BPF prog-id=30 op=LOAD Jul 15 11:29:59.867000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:29:59.867000 audit: BPF prog-id=31 op=LOAD Jul 15 11:29:59.867000 audit: BPF prog-id=32 op=LOAD Jul 15 11:29:59.867000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:29:59.867000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:29:59.870245 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:29:59.871259 systemd[1]: Finished ldconfig.service. Jul 15 11:29:59.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.872378 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:29:59.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.874108 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:29:59.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.877410 systemd[1]: Starting audit-rules.service... Jul 15 11:29:59.879229 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:29:59.881188 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:29:59.882000 audit: BPF prog-id=33 op=LOAD Jul 15 11:29:59.884000 audit: BPF prog-id=34 op=LOAD Jul 15 11:29:59.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.890000 audit[1152]: SYSTEM_BOOT pid=1152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.883446 systemd[1]: Starting systemd-resolved.service... Jul 15 11:29:59.885645 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:29:59.887812 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:29:59.889084 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:29:59.893486 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:29:59.894837 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:29:59.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.898109 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:59.898338 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.899423 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:29:59.901201 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:29:59.902891 systemd[1]: Starting modprobe@loop.service... Jul 15 11:29:59.903869 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.903974 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:29:59.904073 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:29:59.904205 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:59.905093 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:29:59.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.906413 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:29:59.906584 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:29:59.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.907753 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:29:59.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:59.909138 systemd[1]: Starting systemd-update-done.service... Jul 15 11:29:59.910399 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:29:59.910506 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:29:59.911793 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:29:59.911891 systemd[1]: Finished modprobe@loop.service. Jul 15 11:29:59.913941 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:59.914099 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.915357 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:29:59.917315 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:29:59.918905 systemd[1]: Starting modprobe@loop.service... Jul 15 11:29:59.922000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:29:59.922000 audit[1168]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff60540330 a2=420 a3=0 items=0 ppid=1141 pid=1168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:59.922000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:29:59.923941 augenrules[1168]: No rules Jul 15 11:29:59.920670 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.920840 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:29:59.920930 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:29:59.920993 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:59.921942 systemd[1]: Finished systemd-update-done.service. Jul 15 11:29:59.923372 systemd[1]: Finished audit-rules.service. Jul 15 11:29:59.924449 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:29:59.924562 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:29:59.925757 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:29:59.925883 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:29:59.927041 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:29:59.927143 systemd[1]: Finished modprobe@loop.service. Jul 15 11:29:59.928294 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:29:59.928414 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.932007 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:59.932254 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.933765 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:29:59.935552 systemd[1]: Starting modprobe@drm.service... Jul 15 11:29:59.937387 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:29:59.939375 systemd[1]: Starting modprobe@loop.service... Jul 15 11:29:59.940275 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.940384 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:29:59.941668 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:29:59.942861 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:29:59.943058 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:29:59.944123 systemd-resolved[1145]: Positive Trust Anchors: Jul 15 11:29:59.944136 systemd-resolved[1145]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:29:59.944161 systemd-resolved[1145]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:29:59.944167 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:29:59.944271 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:29:59.945656 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:29:59.945774 systemd[1]: Finished modprobe@drm.service. Jul 15 11:29:59.947037 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:29:59.947154 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:29:59.948773 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:29:59.948874 systemd[1]: Finished modprobe@loop.service. Jul 15 11:29:59.951284 systemd[1]: Finished ensure-sysext.service. Jul 15 11:29:59.952511 systemd-resolved[1145]: Defaulting to hostname 'linux'. Jul 15 11:29:59.953323 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:29:59.953357 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:29:59.953401 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:30:00.389729 systemd[1]: Started systemd-resolved.service. Jul 15 11:30:00.389745 systemd-resolved[1145]: Clock change detected. Flushing caches. Jul 15 11:30:00.389785 systemd-timesyncd[1151]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 15 11:30:00.389821 systemd-timesyncd[1151]: Initial clock synchronization to Tue 2025-07-15 11:30:00.389723 UTC. Jul 15 11:30:00.390651 systemd[1]: Reached target network.target. Jul 15 11:30:00.391628 systemd[1]: Reached target nss-lookup.target. Jul 15 11:30:00.392740 systemd[1]: Reached target sysinit.target. Jul 15 11:30:00.393598 systemd[1]: Started motdgen.path. Jul 15 11:30:00.394520 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:30:00.395674 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:30:00.396534 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:30:00.396559 systemd[1]: Reached target paths.target. Jul 15 11:30:00.397414 systemd[1]: Reached target time-set.target. Jul 15 11:30:00.398526 systemd[1]: Started logrotate.timer. Jul 15 11:30:00.399341 systemd[1]: Started mdadm.timer. Jul 15 11:30:00.400079 systemd[1]: Reached target timers.target. Jul 15 11:30:00.401093 systemd[1]: Listening on dbus.socket. Jul 15 11:30:00.403034 systemd[1]: Starting docker.socket... Jul 15 11:30:00.406085 systemd[1]: Listening on sshd.socket. Jul 15 11:30:00.406985 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:30:00.407397 systemd[1]: Listening on docker.socket. Jul 15 11:30:00.408237 systemd[1]: Reached target sockets.target. Jul 15 11:30:00.409034 systemd[1]: Reached target basic.target. Jul 15 11:30:00.409921 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:30:00.409944 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:30:00.410903 systemd[1]: Starting containerd.service... Jul 15 11:30:00.412523 systemd[1]: Starting dbus.service... Jul 15 11:30:00.414162 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:30:00.416035 systemd[1]: Starting extend-filesystems.service... Jul 15 11:30:00.419168 jq[1183]: false Jul 15 11:30:00.417010 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:30:00.417999 systemd[1]: Starting motdgen.service... Jul 15 11:30:00.419716 systemd[1]: Starting prepare-helm.service... Jul 15 11:30:00.421391 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:30:00.423134 systemd[1]: Starting sshd-keygen.service... Jul 15 11:30:00.426073 systemd[1]: Starting systemd-logind.service... Jul 15 11:30:00.427224 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:30:00.427269 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:30:00.427722 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:30:00.428481 systemd[1]: Starting update-engine.service... Jul 15 11:30:00.432448 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:30:00.440532 extend-filesystems[1184]: Found loop1 Jul 15 11:30:00.440532 extend-filesystems[1184]: Found sr0 Jul 15 11:30:00.440532 extend-filesystems[1184]: Found vda Jul 15 11:30:00.440532 extend-filesystems[1184]: Found vda1 Jul 15 11:30:00.440532 extend-filesystems[1184]: Found vda2 Jul 15 11:30:00.440532 extend-filesystems[1184]: Found vda3 Jul 15 11:30:00.440532 extend-filesystems[1184]: Found usr Jul 15 11:30:00.440532 extend-filesystems[1184]: Found vda4 Jul 15 11:30:00.440532 extend-filesystems[1184]: Found vda6 Jul 15 11:30:00.440532 extend-filesystems[1184]: Found vda7 Jul 15 11:30:00.440532 extend-filesystems[1184]: Found vda9 Jul 15 11:30:00.440532 extend-filesystems[1184]: Checking size of /dev/vda9 Jul 15 11:30:00.506142 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 15 11:30:00.436714 dbus-daemon[1182]: [system] SELinux support is enabled Jul 15 11:30:00.434802 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:30:00.506727 extend-filesystems[1184]: Resized partition /dev/vda9 Jul 15 11:30:00.509063 update_engine[1200]: I0715 11:30:00.469831 1200 main.cc:92] Flatcar Update Engine starting Jul 15 11:30:00.509063 update_engine[1200]: I0715 11:30:00.472116 1200 update_check_scheduler.cc:74] Next update check in 5m22s Jul 15 11:30:00.435011 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:30:00.509280 tar[1204]: linux-amd64/LICENSE Jul 15 11:30:00.509280 tar[1204]: linux-amd64/helm Jul 15 11:30:00.509468 extend-filesystems[1233]: resize2fs 1.46.5 (30-Dec-2021) Jul 15 11:30:00.435996 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:30:00.511271 jq[1201]: true Jul 15 11:30:00.436191 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:30:00.511413 env[1206]: time="2025-07-15T11:30:00.506034331Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:30:00.437260 systemd[1]: Started dbus.service. Jul 15 11:30:00.511650 jq[1207]: true Jul 15 11:30:00.439989 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:30:00.440126 systemd[1]: Finished motdgen.service. Jul 15 11:30:00.443418 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:30:00.443444 systemd[1]: Reached target system-config.target. Jul 15 11:30:00.444972 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:30:00.444987 systemd[1]: Reached target user-config.target. Jul 15 11:30:00.473168 systemd[1]: Started update-engine.service. Jul 15 11:30:00.497980 systemd[1]: Started locksmithd.service. Jul 15 11:30:00.504940 systemd-logind[1193]: Watching system buttons on /dev/input/event1 (Power Button) Jul 15 11:30:00.504954 systemd-logind[1193]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 15 11:30:00.506023 systemd-logind[1193]: New seat seat0. Jul 15 11:30:00.512579 systemd[1]: Started systemd-logind.service. Jul 15 11:30:00.517713 bash[1229]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:30:00.515065 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:30:00.519691 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 15 11:30:00.530258 env[1206]: time="2025-07-15T11:30:00.530227353Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:30:00.536668 extend-filesystems[1233]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 15 11:30:00.536668 extend-filesystems[1233]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 15 11:30:00.536668 extend-filesystems[1233]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 15 11:30:00.541422 env[1206]: time="2025-07-15T11:30:00.536619368Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:00.537451 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:30:00.541506 extend-filesystems[1184]: Resized filesystem in /dev/vda9 Jul 15 11:30:00.537627 systemd[1]: Finished extend-filesystems.service. Jul 15 11:30:00.541514 locksmithd[1236]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:30:00.543609 env[1206]: time="2025-07-15T11:30:00.543563598Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:30:00.543609 env[1206]: time="2025-07-15T11:30:00.543597932Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:00.543867 env[1206]: time="2025-07-15T11:30:00.543844535Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:30:00.543902 env[1206]: time="2025-07-15T11:30:00.543866256Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:00.543902 env[1206]: time="2025-07-15T11:30:00.543880612Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:30:00.543902 env[1206]: time="2025-07-15T11:30:00.543890541Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:00.543974 env[1206]: time="2025-07-15T11:30:00.543959029Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:00.544183 env[1206]: time="2025-07-15T11:30:00.544165988Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:00.544301 env[1206]: time="2025-07-15T11:30:00.544283097Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:30:00.544324 env[1206]: time="2025-07-15T11:30:00.544300500Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:30:00.544365 env[1206]: time="2025-07-15T11:30:00.544350113Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:30:00.544390 env[1206]: time="2025-07-15T11:30:00.544364199Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:30:00.550149 env[1206]: time="2025-07-15T11:30:00.550126634Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:30:00.550191 env[1206]: time="2025-07-15T11:30:00.550151971Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:30:00.550191 env[1206]: time="2025-07-15T11:30:00.550165186Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:30:00.550240 env[1206]: time="2025-07-15T11:30:00.550190493Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:30:00.550240 env[1206]: time="2025-07-15T11:30:00.550202716Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:30:00.550240 env[1206]: time="2025-07-15T11:30:00.550214589Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:30:00.550240 env[1206]: time="2025-07-15T11:30:00.550225900Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:30:00.550240 env[1206]: time="2025-07-15T11:30:00.550238443Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:30:00.550334 env[1206]: time="2025-07-15T11:30:00.550249775Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:30:00.550334 env[1206]: time="2025-07-15T11:30:00.550262298Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:30:00.550334 env[1206]: time="2025-07-15T11:30:00.550273399Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:30:00.550334 env[1206]: time="2025-07-15T11:30:00.550283628Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:30:00.550407 env[1206]: time="2025-07-15T11:30:00.550353890Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:30:00.550428 env[1206]: time="2025-07-15T11:30:00.550418401Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:30:00.550654 env[1206]: time="2025-07-15T11:30:00.550633975Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:30:00.550722 env[1206]: time="2025-07-15T11:30:00.550658761Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550722 env[1206]: time="2025-07-15T11:30:00.550672447Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:30:00.550764 env[1206]: time="2025-07-15T11:30:00.550722100Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550764 env[1206]: time="2025-07-15T11:30:00.550735355Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550764 env[1206]: time="2025-07-15T11:30:00.550746606Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550764 env[1206]: time="2025-07-15T11:30:00.550756194Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550839 env[1206]: time="2025-07-15T11:30:00.550766293Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550839 env[1206]: time="2025-07-15T11:30:00.550777514Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550839 env[1206]: time="2025-07-15T11:30:00.550788505Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550839 env[1206]: time="2025-07-15T11:30:00.550798544Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550839 env[1206]: time="2025-07-15T11:30:00.550810426Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:30:00.550936 env[1206]: time="2025-07-15T11:30:00.550902969Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550936 env[1206]: time="2025-07-15T11:30:00.550915753Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550936 env[1206]: time="2025-07-15T11:30:00.550925993Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.550936 env[1206]: time="2025-07-15T11:30:00.550936021Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:30:00.551013 env[1206]: time="2025-07-15T11:30:00.550948184Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:30:00.551013 env[1206]: time="2025-07-15T11:30:00.550957752Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:30:00.551013 env[1206]: time="2025-07-15T11:30:00.550973031Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:30:00.551013 env[1206]: time="2025-07-15T11:30:00.551004129Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:30:00.551270 env[1206]: time="2025-07-15T11:30:00.551211568Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:30:00.551793 env[1206]: time="2025-07-15T11:30:00.551282681Z" level=info msg="Connect containerd service" Jul 15 11:30:00.551793 env[1206]: time="2025-07-15T11:30:00.551319300Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:30:00.552120 env[1206]: time="2025-07-15T11:30:00.552089845Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:30:00.552225 env[1206]: time="2025-07-15T11:30:00.552198729Z" level=info msg="Start subscribing containerd event" Jul 15 11:30:00.552266 env[1206]: time="2025-07-15T11:30:00.552238033Z" level=info msg="Start recovering state" Jul 15 11:30:00.552288 env[1206]: time="2025-07-15T11:30:00.552281103Z" level=info msg="Start event monitor" Jul 15 11:30:00.552309 env[1206]: time="2025-07-15T11:30:00.552293336Z" level=info msg="Start snapshots syncer" Jul 15 11:30:00.552309 env[1206]: time="2025-07-15T11:30:00.552301341Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:30:00.552309 env[1206]: time="2025-07-15T11:30:00.552308565Z" level=info msg="Start streaming server" Jul 15 11:30:00.552583 env[1206]: time="2025-07-15T11:30:00.552563513Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:30:00.552625 env[1206]: time="2025-07-15T11:30:00.552606724Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:30:00.552727 systemd[1]: Started containerd.service. Jul 15 11:30:00.556485 env[1206]: time="2025-07-15T11:30:00.556445231Z" level=info msg="containerd successfully booted in 0.054525s" Jul 15 11:30:00.876016 tar[1204]: linux-amd64/README.md Jul 15 11:30:00.879899 systemd[1]: Finished prepare-helm.service. Jul 15 11:30:01.001694 sshd_keygen[1202]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:30:01.018841 systemd[1]: Finished sshd-keygen.service. Jul 15 11:30:01.021085 systemd[1]: Starting issuegen.service... Jul 15 11:30:01.025913 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:30:01.026057 systemd[1]: Finished issuegen.service. Jul 15 11:30:01.028366 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:30:01.033077 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:30:01.035333 systemd[1]: Started getty@tty1.service. Jul 15 11:30:01.037476 systemd[1]: Started serial-getty@ttyS0.service. Jul 15 11:30:01.038533 systemd[1]: Reached target getty.target. Jul 15 11:30:01.130909 systemd-networkd[1030]: eth0: Gained IPv6LL Jul 15 11:30:01.132804 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:30:01.134316 systemd[1]: Reached target network-online.target. Jul 15 11:30:01.136547 systemd[1]: Starting kubelet.service... Jul 15 11:30:01.784544 systemd[1]: Started kubelet.service. Jul 15 11:30:01.785749 systemd[1]: Reached target multi-user.target. Jul 15 11:30:01.787644 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:30:01.794319 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:30:01.794483 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:30:01.795630 systemd[1]: Startup finished in 613ms (kernel) + 5.641s (initrd) + 5.999s (userspace) = 12.253s. Jul 15 11:30:02.181925 kubelet[1264]: E0715 11:30:02.181862 1264 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:30:02.183576 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:30:02.183715 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:30:03.933894 systemd[1]: Created slice system-sshd.slice. Jul 15 11:30:03.935235 systemd[1]: Started sshd@0-10.0.0.56:22-10.0.0.1:48010.service. Jul 15 11:30:03.970020 sshd[1274]: Accepted publickey for core from 10.0.0.1 port 48010 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:30:03.971454 sshd[1274]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:03.979080 systemd[1]: Created slice user-500.slice. Jul 15 11:30:03.980042 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:30:03.981699 systemd-logind[1193]: New session 1 of user core. Jul 15 11:30:03.989395 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:30:03.991241 systemd[1]: Starting user@500.service... Jul 15 11:30:03.993621 (systemd)[1277]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:04.065096 systemd[1277]: Queued start job for default target default.target. Jul 15 11:30:04.065654 systemd[1277]: Reached target paths.target. Jul 15 11:30:04.065695 systemd[1277]: Reached target sockets.target. Jul 15 11:30:04.065714 systemd[1277]: Reached target timers.target. Jul 15 11:30:04.065729 systemd[1277]: Reached target basic.target. Jul 15 11:30:04.065772 systemd[1277]: Reached target default.target. Jul 15 11:30:04.065801 systemd[1277]: Startup finished in 66ms. Jul 15 11:30:04.065934 systemd[1]: Started user@500.service. Jul 15 11:30:04.066917 systemd[1]: Started session-1.scope. Jul 15 11:30:04.117786 systemd[1]: Started sshd@1-10.0.0.56:22-10.0.0.1:48022.service. Jul 15 11:30:04.154394 sshd[1286]: Accepted publickey for core from 10.0.0.1 port 48022 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:30:04.155855 sshd[1286]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:04.159573 systemd-logind[1193]: New session 2 of user core. Jul 15 11:30:04.160430 systemd[1]: Started session-2.scope. Jul 15 11:30:04.214518 sshd[1286]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:04.217284 systemd[1]: sshd@1-10.0.0.56:22-10.0.0.1:48022.service: Deactivated successfully. Jul 15 11:30:04.217905 systemd[1]: session-2.scope: Deactivated successfully. Jul 15 11:30:04.218442 systemd-logind[1193]: Session 2 logged out. Waiting for processes to exit. Jul 15 11:30:04.219506 systemd[1]: Started sshd@2-10.0.0.56:22-10.0.0.1:48026.service. Jul 15 11:30:04.220278 systemd-logind[1193]: Removed session 2. Jul 15 11:30:04.250783 sshd[1292]: Accepted publickey for core from 10.0.0.1 port 48026 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:30:04.251886 sshd[1292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:04.255527 systemd-logind[1193]: New session 3 of user core. Jul 15 11:30:04.256474 systemd[1]: Started session-3.scope. Jul 15 11:30:04.307046 sshd[1292]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:04.309768 systemd[1]: sshd@2-10.0.0.56:22-10.0.0.1:48026.service: Deactivated successfully. Jul 15 11:30:04.310236 systemd[1]: session-3.scope: Deactivated successfully. Jul 15 11:30:04.310700 systemd-logind[1193]: Session 3 logged out. Waiting for processes to exit. Jul 15 11:30:04.311598 systemd[1]: Started sshd@3-10.0.0.56:22-10.0.0.1:48030.service. Jul 15 11:30:04.312456 systemd-logind[1193]: Removed session 3. Jul 15 11:30:04.343120 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 48030 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:30:04.344030 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:04.347105 systemd-logind[1193]: New session 4 of user core. Jul 15 11:30:04.347815 systemd[1]: Started session-4.scope. Jul 15 11:30:04.399014 sshd[1298]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:04.401488 systemd[1]: sshd@3-10.0.0.56:22-10.0.0.1:48030.service: Deactivated successfully. Jul 15 11:30:04.401940 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:30:04.402390 systemd-logind[1193]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:30:04.403270 systemd[1]: Started sshd@4-10.0.0.56:22-10.0.0.1:48032.service. Jul 15 11:30:04.403904 systemd-logind[1193]: Removed session 4. Jul 15 11:30:04.436476 sshd[1304]: Accepted publickey for core from 10.0.0.1 port 48032 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:30:04.437495 sshd[1304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:04.440756 systemd-logind[1193]: New session 5 of user core. Jul 15 11:30:04.441582 systemd[1]: Started session-5.scope. Jul 15 11:30:04.497233 sudo[1307]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:30:04.497439 sudo[1307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:30:04.504971 dbus-daemon[1182]: \xd0\xed_\xfc\xfcU: received setenforce notice (enforcing=1349015296) Jul 15 11:30:04.505814 sudo[1307]: pam_unix(sudo:session): session closed for user root Jul 15 11:30:04.507530 sshd[1304]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:04.510607 systemd[1]: sshd@4-10.0.0.56:22-10.0.0.1:48032.service: Deactivated successfully. Jul 15 11:30:04.511138 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:30:04.511670 systemd-logind[1193]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:30:04.512762 systemd[1]: Started sshd@5-10.0.0.56:22-10.0.0.1:48034.service. Jul 15 11:30:04.513687 systemd-logind[1193]: Removed session 5. Jul 15 11:30:04.545127 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 48034 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:30:04.546601 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:04.550179 systemd-logind[1193]: New session 6 of user core. Jul 15 11:30:04.550928 systemd[1]: Started session-6.scope. Jul 15 11:30:04.603970 sudo[1315]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:30:04.604158 sudo[1315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:30:04.606624 sudo[1315]: pam_unix(sudo:session): session closed for user root Jul 15 11:30:04.610941 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:30:04.611126 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:30:04.619978 systemd[1]: Stopping audit-rules.service... Jul 15 11:30:04.619000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:30:04.621214 auditctl[1318]: No rules Jul 15 11:30:04.621570 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:30:04.621761 systemd[1]: Stopped audit-rules.service. Jul 15 11:30:04.621869 kernel: kauditd_printk_skb: 270 callbacks suppressed Jul 15 11:30:04.621893 kernel: audit: type=1305 audit(1752579004.619:190): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:30:04.623134 systemd[1]: Starting audit-rules.service... Jul 15 11:30:04.619000 audit[1318]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc9ee10650 a2=420 a3=0 items=0 ppid=1 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:04.627692 kernel: audit: type=1300 audit(1752579004.619:190): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc9ee10650 a2=420 a3=0 items=0 ppid=1 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:04.619000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:30:04.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.631916 kernel: audit: type=1327 audit(1752579004.619:190): proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:30:04.631937 kernel: audit: type=1131 audit(1752579004.620:191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.640060 augenrules[1335]: No rules Jul 15 11:30:04.640579 systemd[1]: Finished audit-rules.service. Jul 15 11:30:04.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.641575 sudo[1314]: pam_unix(sudo:session): session closed for user root Jul 15 11:30:04.639000 audit[1314]: USER_END pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.645131 systemd[1]: sshd@5-10.0.0.56:22-10.0.0.1:48034.service: Deactivated successfully. Jul 15 11:30:04.642990 sshd[1311]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:04.645608 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:30:04.646067 systemd-logind[1193]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:30:04.646838 systemd[1]: Started sshd@6-10.0.0.56:22-10.0.0.1:48050.service. Jul 15 11:30:04.647309 kernel: audit: type=1130 audit(1752579004.639:192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.647365 kernel: audit: type=1106 audit(1752579004.639:193): pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.647383 kernel: audit: type=1104 audit(1752579004.640:194): pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.640000 audit[1314]: CRED_DISP pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.647748 systemd-logind[1193]: Removed session 6. Jul 15 11:30:04.642000 audit[1311]: USER_END pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:04.654180 kernel: audit: type=1106 audit(1752579004.642:195): pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:04.654236 kernel: audit: type=1104 audit(1752579004.642:196): pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:04.642000 audit[1311]: CRED_DISP pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:04.657262 kernel: audit: type=1131 audit(1752579004.643:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.56:22-10.0.0.1:48034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.56:22-10.0.0.1:48034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.56:22-10.0.0.1:48050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.682000 audit[1341]: USER_ACCT pid=1341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:04.684854 sshd[1341]: Accepted publickey for core from 10.0.0.1 port 48050 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:30:04.683000 audit[1341]: CRED_ACQ pid=1341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:04.683000 audit[1341]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe57cd5bd0 a2=3 a3=0 items=0 ppid=1 pid=1341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:04.683000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:30:04.685895 sshd[1341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:04.689718 systemd-logind[1193]: New session 7 of user core. Jul 15 11:30:04.690450 systemd[1]: Started session-7.scope. Jul 15 11:30:04.692000 audit[1341]: USER_START pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:04.693000 audit[1343]: CRED_ACQ pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:04.741000 audit[1344]: USER_ACCT pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.742921 sudo[1344]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:30:04.741000 audit[1344]: CRED_REFR pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.743113 sudo[1344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:30:04.742000 audit[1344]: USER_START pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:04.763461 systemd[1]: Starting docker.service... Jul 15 11:30:04.797583 env[1355]: time="2025-07-15T11:30:04.797538430Z" level=info msg="Starting up" Jul 15 11:30:04.799257 env[1355]: time="2025-07-15T11:30:04.799219822Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:30:04.799257 env[1355]: time="2025-07-15T11:30:04.799246733Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:30:04.799335 env[1355]: time="2025-07-15T11:30:04.799265568Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:30:04.799335 env[1355]: time="2025-07-15T11:30:04.799275286Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:30:04.800703 env[1355]: time="2025-07-15T11:30:04.800670843Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:30:04.800773 env[1355]: time="2025-07-15T11:30:04.800755632Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:30:04.800852 env[1355]: time="2025-07-15T11:30:04.800832797Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:30:04.800926 env[1355]: time="2025-07-15T11:30:04.800909270Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:30:05.843030 env[1355]: time="2025-07-15T11:30:05.842981625Z" level=info msg="Loading containers: start." Jul 15 11:30:05.893000 audit[1390]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.893000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff186f9370 a2=0 a3=7fff186f935c items=0 ppid=1355 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.893000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:30:05.895000 audit[1392]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.895000 audit[1392]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe26942750 a2=0 a3=7ffe2694273c items=0 ppid=1355 pid=1392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.895000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:30:05.896000 audit[1394]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.896000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd7e1b47f0 a2=0 a3=7ffd7e1b47dc items=0 ppid=1355 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.896000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:30:05.898000 audit[1396]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.898000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe1e3effd0 a2=0 a3=7ffe1e3effbc items=0 ppid=1355 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.898000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:30:05.900000 audit[1398]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.900000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc252a9cf0 a2=0 a3=7ffc252a9cdc items=0 ppid=1355 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.900000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:30:05.924000 audit[1403]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.924000 audit[1403]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffed1cc9f90 a2=0 a3=7ffed1cc9f7c items=0 ppid=1355 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.924000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:30:05.933000 audit[1405]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.933000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcfa3e3330 a2=0 a3=7ffcfa3e331c items=0 ppid=1355 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.933000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:30:05.934000 audit[1407]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.934000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd7a90c840 a2=0 a3=7ffd7a90c82c items=0 ppid=1355 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.934000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:30:05.936000 audit[1409]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.936000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffdfa4fc020 a2=0 a3=7ffdfa4fc00c items=0 ppid=1355 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.936000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:30:05.945000 audit[1413]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.945000 audit[1413]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe03cdb0e0 a2=0 a3=7ffe03cdb0cc items=0 ppid=1355 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.945000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:30:05.950000 audit[1414]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:05.950000 audit[1414]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe1aecbeb0 a2=0 a3=7ffe1aecbe9c items=0 ppid=1355 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.950000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:30:05.960710 kernel: Initializing XFRM netlink socket Jul 15 11:30:05.991319 env[1355]: time="2025-07-15T11:30:05.991263825Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:30:06.004000 audit[1422]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.004000 audit[1422]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fff22236b20 a2=0 a3=7fff22236b0c items=0 ppid=1355 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.004000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:30:06.015000 audit[1425]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.015000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe1bef80b0 a2=0 a3=7ffe1bef809c items=0 ppid=1355 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.015000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:30:06.017000 audit[1428]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.017000 audit[1428]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcb888c2c0 a2=0 a3=7ffcb888c2ac items=0 ppid=1355 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.017000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:30:06.019000 audit[1430]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.019000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffebb81edc0 a2=0 a3=7ffebb81edac items=0 ppid=1355 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.019000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:30:06.021000 audit[1432]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.021000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe712d22b0 a2=0 a3=7ffe712d229c items=0 ppid=1355 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.021000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:30:06.023000 audit[1434]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.023000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd11b2d6a0 a2=0 a3=7ffd11b2d68c items=0 ppid=1355 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:30:06.024000 audit[1436]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.024000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffde5664630 a2=0 a3=7ffde566461c items=0 ppid=1355 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.024000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:30:06.032000 audit[1439]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.032000 audit[1439]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffc7464b90 a2=0 a3=7fffc7464b7c items=0 ppid=1355 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.032000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:30:06.033000 audit[1441]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.033000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd02b901d0 a2=0 a3=7ffd02b901bc items=0 ppid=1355 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.033000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:30:06.035000 audit[1443]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.035000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffa0e04290 a2=0 a3=7fffa0e0427c items=0 ppid=1355 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.035000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:30:06.036000 audit[1445]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.036000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc93187760 a2=0 a3=7ffc9318774c items=0 ppid=1355 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.036000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:30:06.038877 systemd-networkd[1030]: docker0: Link UP Jul 15 11:30:06.584000 audit[1449]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.584000 audit[1449]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc22893d30 a2=0 a3=7ffc22893d1c items=0 ppid=1355 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.584000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:30:06.589000 audit[1450]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:06.589000 audit[1450]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff043d0170 a2=0 a3=7fff043d015c items=0 ppid=1355 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.589000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:30:06.591761 env[1355]: time="2025-07-15T11:30:06.591705132Z" level=info msg="Loading containers: done." Jul 15 11:30:06.804083 env[1355]: time="2025-07-15T11:30:06.804037575Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:30:06.804275 env[1355]: time="2025-07-15T11:30:06.804229375Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:30:06.804346 env[1355]: time="2025-07-15T11:30:06.804329402Z" level=info msg="Daemon has completed initialization" Jul 15 11:30:08.007642 systemd[1]: Started docker.service. Jul 15 11:30:08.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:08.013147 env[1355]: time="2025-07-15T11:30:08.013097312Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:30:08.534865 env[1206]: time="2025-07-15T11:30:08.534772132Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 15 11:30:09.417325 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1891868263.mount: Deactivated successfully. Jul 15 11:30:11.741388 env[1206]: time="2025-07-15T11:30:11.741319808Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:11.743397 env[1206]: time="2025-07-15T11:30:11.743349053Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:11.745253 env[1206]: time="2025-07-15T11:30:11.745217396Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:11.746868 env[1206]: time="2025-07-15T11:30:11.746826864Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:11.747652 env[1206]: time="2025-07-15T11:30:11.747614280Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e\"" Jul 15 11:30:11.748268 env[1206]: time="2025-07-15T11:30:11.748239733Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 15 11:30:12.383896 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:30:12.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:12.384170 systemd[1]: Stopped kubelet.service. Jul 15 11:30:12.385041 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 15 11:30:12.385085 kernel: audit: type=1130 audit(1752579012.382:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:12.385807 systemd[1]: Starting kubelet.service... Jul 15 11:30:12.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:12.390812 kernel: audit: type=1131 audit(1752579012.382:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:12.480167 systemd[1]: Started kubelet.service. Jul 15 11:30:12.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:12.483708 kernel: audit: type=1130 audit(1752579012.478:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:12.928621 kubelet[1491]: E0715 11:30:12.928569 1491 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:30:12.931882 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:30:12.931992 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:30:12.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:30:12.935700 kernel: audit: type=1131 audit(1752579012.930:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:30:14.575219 env[1206]: time="2025-07-15T11:30:14.575161781Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:14.577034 env[1206]: time="2025-07-15T11:30:14.577012281Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:14.583784 env[1206]: time="2025-07-15T11:30:14.583748170Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:14.585253 env[1206]: time="2025-07-15T11:30:14.585218076Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:14.585885 env[1206]: time="2025-07-15T11:30:14.585856343Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2\"" Jul 15 11:30:14.586263 env[1206]: time="2025-07-15T11:30:14.586245904Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 15 11:30:16.532839 env[1206]: time="2025-07-15T11:30:16.532768543Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:16.544358 env[1206]: time="2025-07-15T11:30:16.544311065Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:16.546308 env[1206]: time="2025-07-15T11:30:16.546277863Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:16.548110 env[1206]: time="2025-07-15T11:30:16.548086715Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:16.548986 env[1206]: time="2025-07-15T11:30:16.548921019Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b\"" Jul 15 11:30:16.549538 env[1206]: time="2025-07-15T11:30:16.549501147Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 15 11:30:17.543012 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3098992809.mount: Deactivated successfully. Jul 15 11:30:18.184813 env[1206]: time="2025-07-15T11:30:18.184767040Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:18.187472 env[1206]: time="2025-07-15T11:30:18.187424723Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:18.188959 env[1206]: time="2025-07-15T11:30:18.188926589Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:18.190073 env[1206]: time="2025-07-15T11:30:18.190036761Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:18.190482 env[1206]: time="2025-07-15T11:30:18.190457940Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19\"" Jul 15 11:30:18.190977 env[1206]: time="2025-07-15T11:30:18.190940365Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 15 11:30:18.737986 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount250153191.mount: Deactivated successfully. Jul 15 11:30:20.332411 env[1206]: time="2025-07-15T11:30:20.332347362Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:20.334353 env[1206]: time="2025-07-15T11:30:20.334328818Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:20.336141 env[1206]: time="2025-07-15T11:30:20.336109877Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:20.339127 env[1206]: time="2025-07-15T11:30:20.339091908Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:20.339939 env[1206]: time="2025-07-15T11:30:20.339892079Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Jul 15 11:30:20.340363 env[1206]: time="2025-07-15T11:30:20.340341902Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:30:20.828858 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1000126357.mount: Deactivated successfully. Jul 15 11:30:20.834701 env[1206]: time="2025-07-15T11:30:20.834642866Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:20.836701 env[1206]: time="2025-07-15T11:30:20.836663705Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:20.838000 env[1206]: time="2025-07-15T11:30:20.837968482Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:20.839337 env[1206]: time="2025-07-15T11:30:20.839303695Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:20.839714 env[1206]: time="2025-07-15T11:30:20.839655655Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 15 11:30:20.840185 env[1206]: time="2025-07-15T11:30:20.840157356Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 15 11:30:21.321959 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2669378394.mount: Deactivated successfully. Jul 15 11:30:23.133698 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:30:23.141163 kernel: audit: type=1130 audit(1752579023.132:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:23.141218 kernel: audit: type=1131 audit(1752579023.132:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:23.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:23.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:23.133942 systemd[1]: Stopped kubelet.service. Jul 15 11:30:23.135415 systemd[1]: Starting kubelet.service... Jul 15 11:30:23.220496 systemd[1]: Started kubelet.service. Jul 15 11:30:23.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:23.225719 kernel: audit: type=1130 audit(1752579023.219:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:23.256270 kubelet[1502]: E0715 11:30:23.256206 1502 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:30:23.258613 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:30:23.258764 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:30:23.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:30:23.263729 kernel: audit: type=1131 audit(1752579023.257:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:30:27.197098 env[1206]: time="2025-07-15T11:30:27.197007168Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:27.201036 env[1206]: time="2025-07-15T11:30:27.200982521Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:27.203114 env[1206]: time="2025-07-15T11:30:27.203055699Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:27.205290 env[1206]: time="2025-07-15T11:30:27.205222311Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:27.206226 env[1206]: time="2025-07-15T11:30:27.206184315Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Jul 15 11:30:30.162657 systemd[1]: Stopped kubelet.service. Jul 15 11:30:30.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:30.165595 systemd[1]: Starting kubelet.service... Jul 15 11:30:30.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:30.169432 kernel: audit: type=1130 audit(1752579030.161:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:30.169501 kernel: audit: type=1131 audit(1752579030.161:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:30.194691 systemd[1]: Reloading. Jul 15 11:30:30.266699 /usr/lib/systemd/system-generators/torcx-generator[1559]: time="2025-07-15T11:30:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:30:30.267042 /usr/lib/systemd/system-generators/torcx-generator[1559]: time="2025-07-15T11:30:30Z" level=info msg="torcx already run" Jul 15 11:30:30.853331 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:30:30.853349 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:30:30.870702 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:30:30.940868 kernel: audit: type=1400 audit(1752579030.927:242): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941068 kernel: audit: type=1400 audit(1752579030.927:243): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941113 kernel: audit: type=1400 audit(1752579030.927:244): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.945315 kernel: audit: type=1400 audit(1752579030.927:245): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.945368 kernel: audit: type=1400 audit(1752579030.927:246): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.953173 kernel: audit: type=1400 audit(1752579030.927:247): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.953221 kernel: audit: type=1400 audit(1752579030.927:248): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.956829 kernel: audit: type=1400 audit(1752579030.927:249): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit: BPF prog-id=40 op=LOAD Jul 15 11:30:30.935000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.939000 audit: BPF prog-id=41 op=LOAD Jul 15 11:30:30.939000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:30:30.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.943000 audit: BPF prog-id=42 op=LOAD Jul 15 11:30:30.943000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:30:30.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.951000 audit: BPF prog-id=43 op=LOAD Jul 15 11:30:30.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit: BPF prog-id=44 op=LOAD Jul 15 11:30:30.958000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:30:30.958000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.959000 audit: BPF prog-id=45 op=LOAD Jul 15 11:30:30.959000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit: BPF prog-id=46 op=LOAD Jul 15 11:30:30.960000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit: BPF prog-id=47 op=LOAD Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.960000 audit: BPF prog-id=48 op=LOAD Jul 15 11:30:30.960000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:30:30.960000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit: BPF prog-id=49 op=LOAD Jul 15 11:30:30.961000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit: BPF prog-id=50 op=LOAD Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.962000 audit: BPF prog-id=51 op=LOAD Jul 15 11:30:30.962000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:30:30.962000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit: BPF prog-id=52 op=LOAD Jul 15 11:30:30.963000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit: BPF prog-id=53 op=LOAD Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:30.963000 audit: BPF prog-id=54 op=LOAD Jul 15 11:30:30.963000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:30:30.963000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:30:30.975928 systemd[1]: Started kubelet.service. Jul 15 11:30:30.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:30.977272 systemd[1]: Stopping kubelet.service... Jul 15 11:30:30.977489 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:30:30.977656 systemd[1]: Stopped kubelet.service. Jul 15 11:30:30.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:30.979079 systemd[1]: Starting kubelet.service... Jul 15 11:30:31.087716 systemd[1]: Started kubelet.service. Jul 15 11:30:31.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:31.122621 kubelet[1607]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:30:31.122621 kubelet[1607]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:30:31.122621 kubelet[1607]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:30:31.122621 kubelet[1607]: I0715 11:30:31.122557 1607 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:30:31.561777 kubelet[1607]: I0715 11:30:31.561730 1607 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 15 11:30:31.561777 kubelet[1607]: I0715 11:30:31.561765 1607 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:30:31.562137 kubelet[1607]: I0715 11:30:31.562115 1607 server.go:956] "Client rotation is on, will bootstrap in background" Jul 15 11:30:31.589448 kubelet[1607]: I0715 11:30:31.589408 1607 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:30:31.593221 kubelet[1607]: E0715 11:30:31.593193 1607 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.56:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 15 11:30:31.600631 kubelet[1607]: E0715 11:30:31.600606 1607 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:30:31.600717 kubelet[1607]: I0715 11:30:31.600632 1607 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:30:31.604250 kubelet[1607]: I0715 11:30:31.604237 1607 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:30:31.604427 kubelet[1607]: I0715 11:30:31.604403 1607 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:30:31.604562 kubelet[1607]: I0715 11:30:31.604424 1607 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:30:31.604663 kubelet[1607]: I0715 11:30:31.604566 1607 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:30:31.604663 kubelet[1607]: I0715 11:30:31.604573 1607 container_manager_linux.go:303] "Creating device plugin manager" Jul 15 11:30:31.605340 kubelet[1607]: I0715 11:30:31.605312 1607 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:30:31.609329 kubelet[1607]: I0715 11:30:31.609307 1607 kubelet.go:480] "Attempting to sync node with API server" Jul 15 11:30:31.609380 kubelet[1607]: I0715 11:30:31.609347 1607 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:30:31.609412 kubelet[1607]: I0715 11:30:31.609380 1607 kubelet.go:386] "Adding apiserver pod source" Jul 15 11:30:31.613207 kubelet[1607]: I0715 11:30:31.613179 1607 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:30:31.633541 kubelet[1607]: I0715 11:30:31.633517 1607 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:30:31.634001 kubelet[1607]: E0715 11:30:31.633934 1607 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.56:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 15 11:30:31.634103 kubelet[1607]: E0715 11:30:31.634079 1607 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.56:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 15 11:30:31.634184 kubelet[1607]: I0715 11:30:31.634158 1607 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 15 11:30:31.635102 kubelet[1607]: W0715 11:30:31.635077 1607 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:30:31.637481 kubelet[1607]: I0715 11:30:31.637454 1607 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:30:31.637631 kubelet[1607]: I0715 11:30:31.637514 1607 server.go:1289] "Started kubelet" Jul 15 11:30:31.637824 kubelet[1607]: I0715 11:30:31.637785 1607 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:30:31.639714 kubelet[1607]: I0715 11:30:31.639651 1607 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:30:31.639000 audit[1607]: AVC avc: denied { mac_admin } for pid=1607 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:31.639000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:30:31.639000 audit[1607]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009513e0 a1=c000d0e9a8 a2=c0009513b0 a3=25 items=0 ppid=1 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.641292 kubelet[1607]: I0715 11:30:31.641134 1607 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:30:31.641292 kubelet[1607]: I0715 11:30:31.641178 1607 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:30:31.641292 kubelet[1607]: I0715 11:30:31.641234 1607 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:30:31.641640 kubelet[1607]: I0715 11:30:31.641394 1607 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:30:31.641640 kubelet[1607]: I0715 11:30:31.641498 1607 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:30:31.639000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:30:31.639000 audit[1607]: AVC avc: denied { mac_admin } for pid=1607 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:31.639000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:30:31.639000 audit[1607]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00015cba0 a1=c000d0e9c0 a2=c000951470 a3=25 items=0 ppid=1 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.639000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:30:31.642153 kubelet[1607]: I0715 11:30:31.642111 1607 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:30:31.643041 kubelet[1607]: I0715 11:30:31.643015 1607 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:30:31.643097 kubelet[1607]: I0715 11:30:31.643061 1607 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:30:31.643176 kubelet[1607]: I0715 11:30:31.643144 1607 server.go:317] "Adding debug handlers to kubelet server" Jul 15 11:30:31.643754 kubelet[1607]: E0715 11:30:31.643718 1607 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.56:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 15 11:30:31.644199 kubelet[1607]: E0715 11:30:31.644178 1607 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:30:31.644322 kubelet[1607]: I0715 11:30:31.644305 1607 factory.go:223] Registration of the systemd container factory successfully Jul 15 11:30:31.644388 kubelet[1607]: I0715 11:30:31.644361 1607 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:30:31.644849 kubelet[1607]: E0715 11:30:31.644831 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:31.645001 kubelet[1607]: I0715 11:30:31.644976 1607 factory.go:223] Registration of the containerd container factory successfully Jul 15 11:30:31.644000 audit[1624]: NETFILTER_CFG table=mangle:26 family=10 entries=2 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:31.644000 audit[1624]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd91776470 a2=0 a3=7ffd9177645c items=0 ppid=1607 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.644000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:30:31.646269 kubelet[1607]: I0715 11:30:31.646241 1607 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 15 11:30:31.646974 kubelet[1607]: E0715 11:30:31.646932 1607 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.56:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.56:6443: connect: connection refused" interval="200ms" Jul 15 11:30:31.647550 kubelet[1607]: E0715 11:30:31.646245 1607 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.56:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.56:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18526957fd8cb815 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:30:31.637473301 +0000 UTC m=+0.546152497,LastTimestamp:2025-07-15 11:30:31.637473301 +0000 UTC m=+0.546152497,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:30:31.645000 audit[1625]: NETFILTER_CFG table=mangle:27 family=2 entries=2 op=nft_register_chain pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:31.645000 audit[1625]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdb10440e0 a2=0 a3=7ffdb10440cc items=0 ppid=1607 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.645000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:30:31.646000 audit[1626]: NETFILTER_CFG table=mangle:28 family=10 entries=1 op=nft_register_chain pid=1626 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:31.646000 audit[1626]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe95ed20a0 a2=0 a3=7ffe95ed208c items=0 ppid=1607 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.646000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:30:31.646000 audit[1627]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:31.646000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff97311770 a2=0 a3=7fff9731175c items=0 ppid=1607 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:30:31.647000 audit[1628]: NETFILTER_CFG table=nat:30 family=10 entries=2 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:31.647000 audit[1628]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff396b04a0 a2=0 a3=7fff396b048c items=0 ppid=1607 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.647000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:30:31.648000 audit[1630]: NETFILTER_CFG table=filter:31 family=10 entries=2 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:31.648000 audit[1630]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd67bf4390 a2=0 a3=7ffd67bf437c items=0 ppid=1607 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.648000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:30:31.648000 audit[1631]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:31.648000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd3820a6e0 a2=0 a3=7ffd3820a6cc items=0 ppid=1607 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.648000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:30:31.650000 audit[1633]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:31.650000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc7edd7540 a2=0 a3=7ffc7edd752c items=0 ppid=1607 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:30:31.655808 kubelet[1607]: I0715 11:30:31.655788 1607 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:30:31.655808 kubelet[1607]: I0715 11:30:31.655802 1607 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:30:31.655898 kubelet[1607]: I0715 11:30:31.655815 1607 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:30:31.655000 audit[1638]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:31.655000 audit[1638]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffdc6157e60 a2=0 a3=7ffdc6157e4c items=0 ppid=1607 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:30:31.657238 kubelet[1607]: I0715 11:30:31.657205 1607 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 15 11:30:31.657238 kubelet[1607]: I0715 11:30:31.657225 1607 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 15 11:30:31.657238 kubelet[1607]: I0715 11:30:31.657241 1607 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:30:31.657358 kubelet[1607]: I0715 11:30:31.657247 1607 kubelet.go:2436] "Starting kubelet main sync loop" Jul 15 11:30:31.657358 kubelet[1607]: E0715 11:30:31.657286 1607 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:30:31.656000 audit[1639]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:31.656000 audit[1639]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff12b2fb10 a2=0 a3=7fff12b2fafc items=0 ppid=1607 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.656000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:30:31.656000 audit[1641]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:31.656000 audit[1641]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdde51d870 a2=0 a3=7ffdde51d85c items=0 ppid=1607 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.656000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:30:31.657000 audit[1642]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:31.657000 audit[1642]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc7189f570 a2=0 a3=7ffc7189f55c items=0 ppid=1607 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:31.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:30:31.659786 kubelet[1607]: E0715 11:30:31.659766 1607 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.56:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 15 11:30:31.745729 kubelet[1607]: E0715 11:30:31.745664 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:31.758017 kubelet[1607]: E0715 11:30:31.757911 1607 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:30:31.846732 kubelet[1607]: E0715 11:30:31.846566 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:31.848302 kubelet[1607]: E0715 11:30:31.848240 1607 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.56:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.56:6443: connect: connection refused" interval="400ms" Jul 15 11:30:31.946779 kubelet[1607]: E0715 11:30:31.946733 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:31.958952 kubelet[1607]: E0715 11:30:31.958897 1607 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:30:32.047558 kubelet[1607]: E0715 11:30:32.047508 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:32.148162 kubelet[1607]: E0715 11:30:32.148128 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:32.249038 kubelet[1607]: E0715 11:30:32.248970 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:32.249319 kubelet[1607]: E0715 11:30:32.249287 1607 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.56:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.56:6443: connect: connection refused" interval="800ms" Jul 15 11:30:32.292441 kubelet[1607]: I0715 11:30:32.292408 1607 policy_none.go:49] "None policy: Start" Jul 15 11:30:32.292441 kubelet[1607]: I0715 11:30:32.292434 1607 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:30:32.292540 kubelet[1607]: I0715 11:30:32.292449 1607 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:30:32.349847 kubelet[1607]: E0715 11:30:32.349808 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:32.360051 kubelet[1607]: E0715 11:30:32.359998 1607 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:30:32.450847 kubelet[1607]: E0715 11:30:32.450726 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:32.551485 kubelet[1607]: E0715 11:30:32.551445 1607 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:30:32.575926 systemd[1]: Created slice kubepods.slice. Jul 15 11:30:32.579882 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:30:32.582145 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:30:32.591518 kubelet[1607]: E0715 11:30:32.591479 1607 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 15 11:30:32.589000 audit[1607]: AVC avc: denied { mac_admin } for pid=1607 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:32.589000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:30:32.589000 audit[1607]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000eec000 a1=c000ee6558 a2=c000eb9fb0 a3=25 items=0 ppid=1 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:32.589000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:30:32.592809 kubelet[1607]: E0715 11:30:32.591549 1607 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 15 11:30:32.592809 kubelet[1607]: I0715 11:30:32.591668 1607 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:30:32.592809 kubelet[1607]: I0715 11:30:32.591696 1607 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:30:32.592809 kubelet[1607]: I0715 11:30:32.592051 1607 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:30:32.593198 kubelet[1607]: E0715 11:30:32.593182 1607 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:30:32.593246 kubelet[1607]: E0715 11:30:32.593214 1607 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:30:32.594344 kubelet[1607]: E0715 11:30:32.594287 1607 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.56:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 15 11:30:32.654603 kubelet[1607]: E0715 11:30:32.654552 1607 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.56:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 15 11:30:32.692929 kubelet[1607]: I0715 11:30:32.692885 1607 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:30:32.693278 kubelet[1607]: E0715 11:30:32.693231 1607 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.56:6443/api/v1/nodes\": dial tcp 10.0.0.56:6443: connect: connection refused" node="localhost" Jul 15 11:30:32.894654 kubelet[1607]: I0715 11:30:32.894615 1607 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:30:32.895079 kubelet[1607]: E0715 11:30:32.895027 1607 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.56:6443/api/v1/nodes\": dial tcp 10.0.0.56:6443: connect: connection refused" node="localhost" Jul 15 11:30:33.030807 kubelet[1607]: E0715 11:30:33.030750 1607 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.56:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 15 11:30:33.043697 kubelet[1607]: E0715 11:30:33.043621 1607 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.56:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 15 11:30:33.050355 kubelet[1607]: E0715 11:30:33.050299 1607 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.56:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.56:6443: connect: connection refused" interval="1.6s" Jul 15 11:30:33.168874 systemd[1]: Created slice kubepods-burstable-podb34834d244b85b7c39ea6ab17bd90157.slice. Jul 15 11:30:33.182968 kubelet[1607]: E0715 11:30:33.182931 1607 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:30:33.185261 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 15 11:30:33.186666 kubelet[1607]: E0715 11:30:33.186649 1607 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:30:33.188849 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 15 11:30:33.190213 kubelet[1607]: E0715 11:30:33.190165 1607 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:30:33.253776 kubelet[1607]: I0715 11:30:33.253705 1607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:33.253776 kubelet[1607]: I0715 11:30:33.253744 1607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:33.253911 kubelet[1607]: I0715 11:30:33.253807 1607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:33.253911 kubelet[1607]: I0715 11:30:33.253829 1607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b34834d244b85b7c39ea6ab17bd90157-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"b34834d244b85b7c39ea6ab17bd90157\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:33.253911 kubelet[1607]: I0715 11:30:33.253853 1607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:33.253911 kubelet[1607]: I0715 11:30:33.253880 1607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:33.253911 kubelet[1607]: I0715 11:30:33.253898 1607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b34834d244b85b7c39ea6ab17bd90157-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"b34834d244b85b7c39ea6ab17bd90157\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:33.254017 kubelet[1607]: I0715 11:30:33.253910 1607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b34834d244b85b7c39ea6ab17bd90157-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"b34834d244b85b7c39ea6ab17bd90157\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:33.254017 kubelet[1607]: I0715 11:30:33.253927 1607 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:33.296884 kubelet[1607]: I0715 11:30:33.296836 1607 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:30:33.297252 kubelet[1607]: E0715 11:30:33.297203 1607 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.56:6443/api/v1/nodes\": dial tcp 10.0.0.56:6443: connect: connection refused" node="localhost" Jul 15 11:30:33.483964 kubelet[1607]: E0715 11:30:33.483467 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:33.484291 env[1206]: time="2025-07-15T11:30:33.484243158Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:b34834d244b85b7c39ea6ab17bd90157,Namespace:kube-system,Attempt:0,}" Jul 15 11:30:33.487433 kubelet[1607]: E0715 11:30:33.487397 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:33.487935 env[1206]: time="2025-07-15T11:30:33.487890460Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 15 11:30:33.491027 kubelet[1607]: E0715 11:30:33.491005 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:33.491285 env[1206]: time="2025-07-15T11:30:33.491256753Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 15 11:30:33.780448 kubelet[1607]: E0715 11:30:33.780330 1607 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.56:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 15 11:30:34.068817 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3538197171.mount: Deactivated successfully. Jul 15 11:30:34.073778 env[1206]: time="2025-07-15T11:30:34.073720655Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.076661 env[1206]: time="2025-07-15T11:30:34.076600720Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.077536 env[1206]: time="2025-07-15T11:30:34.077499018Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.078370 env[1206]: time="2025-07-15T11:30:34.078320978Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.080810 env[1206]: time="2025-07-15T11:30:34.080750638Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.081902 env[1206]: time="2025-07-15T11:30:34.081849761Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.083066 env[1206]: time="2025-07-15T11:30:34.083034769Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.084274 env[1206]: time="2025-07-15T11:30:34.084236980Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.085858 env[1206]: time="2025-07-15T11:30:34.085831696Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.087825 env[1206]: time="2025-07-15T11:30:34.087786243Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.088643 env[1206]: time="2025-07-15T11:30:34.088620005Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.090308 env[1206]: time="2025-07-15T11:30:34.090278554Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:34.098595 kubelet[1607]: I0715 11:30:34.098546 1607 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:30:34.098982 kubelet[1607]: E0715 11:30:34.098949 1607 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.56:6443/api/v1/nodes\": dial tcp 10.0.0.56:6443: connect: connection refused" node="localhost" Jul 15 11:30:34.255130 env[1206]: time="2025-07-15T11:30:34.255042105Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:34.255130 env[1206]: time="2025-07-15T11:30:34.255092031Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:34.255130 env[1206]: time="2025-07-15T11:30:34.255105146Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:34.255337 env[1206]: time="2025-07-15T11:30:34.255260424Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6c8cbcb20f647e74c5f406045af2c066ba2075d4108f2fe9507930b28af360ef pid=1653 runtime=io.containerd.runc.v2 Jul 15 11:30:34.257361 env[1206]: time="2025-07-15T11:30:34.257192719Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:34.257361 env[1206]: time="2025-07-15T11:30:34.257227957Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:34.257361 env[1206]: time="2025-07-15T11:30:34.257236934Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:34.257450 env[1206]: time="2025-07-15T11:30:34.257386281Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0a2b7db6386f4ce7b198e6d6c1dfc15b6c952d9f651dbea6a3144a4877235d37 pid=1665 runtime=io.containerd.runc.v2 Jul 15 11:30:34.270336 env[1206]: time="2025-07-15T11:30:34.269499237Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:34.270336 env[1206]: time="2025-07-15T11:30:34.269555394Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:34.270336 env[1206]: time="2025-07-15T11:30:34.269564933Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:34.270336 env[1206]: time="2025-07-15T11:30:34.269769185Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9a3f739b76c7294fefb7430ffee03f04194b560c39ce4aa38fa4bbcb70a801df pid=1687 runtime=io.containerd.runc.v2 Jul 15 11:30:34.276921 systemd[1]: Started cri-containerd-6c8cbcb20f647e74c5f406045af2c066ba2075d4108f2fe9507930b28af360ef.scope. Jul 15 11:30:34.363399 systemd[1]: Started cri-containerd-0a2b7db6386f4ce7b198e6d6c1dfc15b6c952d9f651dbea6a3144a4877235d37.scope. Jul 15 11:30:34.442113 systemd[1]: Started cri-containerd-9a3f739b76c7294fefb7430ffee03f04194b560c39ce4aa38fa4bbcb70a801df.scope. Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.447000 audit: BPF prog-id=55 op=LOAD Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1665 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061326237646236333836663463653762313938653664366331646663 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1665 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061326237646236333836663463653762313938653664366331646663 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.448000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit: BPF prog-id=57 op=LOAD Jul 15 11:30:34.448000 audit: BPF prog-id=56 op=LOAD Jul 15 11:30:34.448000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001aa350 items=0 ppid=1665 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061326237646236333836663463653762313938653664366331646663 Jul 15 11:30:34.482000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.482000 audit: BPF prog-id=58 op=LOAD Jul 15 11:30:34.482000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001aa398 items=0 ppid=1665 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061326237646236333836663463653762313938653664366331646663 Jul 15 11:30:34.482000 audit: BPF prog-id=58 op=UNLOAD Jul 15 11:30:34.483000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.483000 audit: BPF prog-id=59 op=LOAD Jul 15 11:30:34.483000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001aa7a8 items=0 ppid=1665 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061326237646236333836663463653762313938653664366331646663 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1653 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386362636232306636343765373463356634303630343561663263 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1653 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386362636232306636343765373463356634303630343561663263 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.484000 audit: BPF prog-id=60 op=LOAD Jul 15 11:30:34.484000 audit[1677]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000404cb0 items=0 ppid=1653 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386362636232306636343765373463356634303630343561663263 Jul 15 11:30:34.485000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.485000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.485000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.485000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.485000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.485000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.485000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.485000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.485000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.485000 audit: BPF prog-id=61 op=LOAD Jul 15 11:30:34.485000 audit[1677]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000404cf8 items=0 ppid=1653 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386362636232306636343765373463356634303630343561663263 Jul 15 11:30:34.487000 audit: BPF prog-id=61 op=UNLOAD Jul 15 11:30:34.487000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.487000 audit: BPF prog-id=62 op=LOAD Jul 15 11:30:34.487000 audit[1677]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000405108 items=0 ppid=1653 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663386362636232306636343765373463356634303630343561663263 Jul 15 11:30:34.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.519000 audit: BPF prog-id=63 op=LOAD Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1687 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336637333962373663373239346665666237343330666665653033 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1687 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336637333962373663373239346665666237343330666665653033 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.523000 audit: BPF prog-id=64 op=LOAD Jul 15 11:30:34.523000 audit[1712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003a1180 items=0 ppid=1687 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336637333962373663373239346665666237343330666665653033 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit: BPF prog-id=65 op=LOAD Jul 15 11:30:34.524000 audit[1712]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003a11c8 items=0 ppid=1687 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336637333962373663373239346665666237343330666665653033 Jul 15 11:30:34.524000 audit: BPF prog-id=65 op=UNLOAD Jul 15 11:30:34.524000 audit: BPF prog-id=64 op=UNLOAD Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { perfmon } for pid=1712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit[1712]: AVC avc: denied { bpf } for pid=1712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.524000 audit: BPF prog-id=66 op=LOAD Jul 15 11:30:34.524000 audit[1712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a15d8 items=0 ppid=1687 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336637333962373663373239346665666237343330666665653033 Jul 15 11:30:34.529577 env[1206]: time="2025-07-15T11:30:34.529535464Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:b34834d244b85b7c39ea6ab17bd90157,Namespace:kube-system,Attempt:0,} returns sandbox id \"0a2b7db6386f4ce7b198e6d6c1dfc15b6c952d9f651dbea6a3144a4877235d37\"" Jul 15 11:30:34.530852 kubelet[1607]: E0715 11:30:34.530829 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:34.533801 env[1206]: time="2025-07-15T11:30:34.533753402Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"6c8cbcb20f647e74c5f406045af2c066ba2075d4108f2fe9507930b28af360ef\"" Jul 15 11:30:34.534704 kubelet[1607]: E0715 11:30:34.534649 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:34.536879 env[1206]: time="2025-07-15T11:30:34.536838963Z" level=info msg="CreateContainer within sandbox \"0a2b7db6386f4ce7b198e6d6c1dfc15b6c952d9f651dbea6a3144a4877235d37\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:30:34.539575 env[1206]: time="2025-07-15T11:30:34.539533713Z" level=info msg="CreateContainer within sandbox \"6c8cbcb20f647e74c5f406045af2c066ba2075d4108f2fe9507930b28af360ef\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:30:34.557391 env[1206]: time="2025-07-15T11:30:34.557333521Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"9a3f739b76c7294fefb7430ffee03f04194b560c39ce4aa38fa4bbcb70a801df\"" Jul 15 11:30:34.558691 kubelet[1607]: E0715 11:30:34.558493 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:34.560115 env[1206]: time="2025-07-15T11:30:34.560080992Z" level=info msg="CreateContainer within sandbox \"6c8cbcb20f647e74c5f406045af2c066ba2075d4108f2fe9507930b28af360ef\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"91f8988e00dee136dbbee281d0b0170baf1be588ae078691a4d321e9f0f1f129\"" Jul 15 11:30:34.560601 env[1206]: time="2025-07-15T11:30:34.560562447Z" level=info msg="StartContainer for \"91f8988e00dee136dbbee281d0b0170baf1be588ae078691a4d321e9f0f1f129\"" Jul 15 11:30:34.563013 env[1206]: time="2025-07-15T11:30:34.562975286Z" level=info msg="CreateContainer within sandbox \"9a3f739b76c7294fefb7430ffee03f04194b560c39ce4aa38fa4bbcb70a801df\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:30:34.564210 env[1206]: time="2025-07-15T11:30:34.564166516Z" level=info msg="CreateContainer within sandbox \"0a2b7db6386f4ce7b198e6d6c1dfc15b6c952d9f651dbea6a3144a4877235d37\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"59ef910acaa544eb5c57c87dda2efe6cfe10aa6dfcbb7743739c1dee863fceb1\"" Jul 15 11:30:34.566020 env[1206]: time="2025-07-15T11:30:34.565982787Z" level=info msg="StartContainer for \"59ef910acaa544eb5c57c87dda2efe6cfe10aa6dfcbb7743739c1dee863fceb1\"" Jul 15 11:30:34.576270 env[1206]: time="2025-07-15T11:30:34.576219386Z" level=info msg="CreateContainer within sandbox \"9a3f739b76c7294fefb7430ffee03f04194b560c39ce4aa38fa4bbcb70a801df\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"33fd51af240b8fb6656af52499a7129ca99869c3b6be119b09ca7fdcd91fb2af\"" Jul 15 11:30:34.576669 env[1206]: time="2025-07-15T11:30:34.576644583Z" level=info msg="StartContainer for \"33fd51af240b8fb6656af52499a7129ca99869c3b6be119b09ca7fdcd91fb2af\"" Jul 15 11:30:34.582748 systemd[1]: Started cri-containerd-91f8988e00dee136dbbee281d0b0170baf1be588ae078691a4d321e9f0f1f129.scope. Jul 15 11:30:34.588150 systemd[1]: Started cri-containerd-59ef910acaa544eb5c57c87dda2efe6cfe10aa6dfcbb7743739c1dee863fceb1.scope. Jul 15 11:30:34.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.598389 systemd[1]: Started cri-containerd-33fd51af240b8fb6656af52499a7129ca99869c3b6be119b09ca7fdcd91fb2af.scope. Jul 15 11:30:34.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.646000 audit: BPF prog-id=67 op=LOAD Jul 15 11:30:34.646000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.646000 audit[1787]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1653 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663839383865303064656531333664626265653238316430623031 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1653 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663839383865303064656531333664626265653238316430623031 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit: BPF prog-id=68 op=LOAD Jul 15 11:30:34.647000 audit[1787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000305900 items=0 ppid=1653 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663839383865303064656531333664626265653238316430623031 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit: BPF prog-id=69 op=LOAD Jul 15 11:30:34.647000 audit[1787]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000305948 items=0 ppid=1653 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663839383865303064656531333664626265653238316430623031 Jul 15 11:30:34.647000 audit: BPF prog-id=69 op=UNLOAD Jul 15 11:30:34.647000 audit: BPF prog-id=68 op=UNLOAD Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.647000 audit: BPF prog-id=70 op=LOAD Jul 15 11:30:34.647000 audit[1787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000305d58 items=0 ppid=1653 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663839383865303064656531333664626265653238316430623031 Jul 15 11:30:34.655153 kubelet[1607]: E0715 11:30:34.655099 1607 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.56:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.56:6443: connect: connection refused" interval="3.2s" Jul 15 11:30:34.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit: BPF prog-id=71 op=LOAD Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1665 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656639313061636161353434656235633537633837646461326566 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1665 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656639313061636161353434656235633537633837646461326566 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit: BPF prog-id=72 op=LOAD Jul 15 11:30:34.664000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00029b800 items=0 ppid=1665 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656639313061636161353434656235633537633837646461326566 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.664000 audit: BPF prog-id=73 op=LOAD Jul 15 11:30:34.664000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00029b848 items=0 ppid=1665 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656639313061636161353434656235633537633837646461326566 Jul 15 11:30:34.666000 audit: BPF prog-id=73 op=UNLOAD Jul 15 11:30:34.666000 audit: BPF prog-id=72 op=UNLOAD Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.666000 audit: BPF prog-id=74 op=LOAD Jul 15 11:30:34.666000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00029bc58 items=0 ppid=1665 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656639313061636161353434656235633537633837646461326566 Jul 15 11:30:34.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit: BPF prog-id=75 op=LOAD Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1687 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666435316166323430623866623636353661663532343939613731 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1687 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666435316166323430623866623636353661663532343939613731 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit: BPF prog-id=76 op=LOAD Jul 15 11:30:34.671000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003922f0 items=0 ppid=1687 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666435316166323430623866623636353661663532343939613731 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit: BPF prog-id=77 op=LOAD Jul 15 11:30:34.671000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000392338 items=0 ppid=1687 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666435316166323430623866623636353661663532343939613731 Jul 15 11:30:34.671000 audit: BPF prog-id=77 op=UNLOAD Jul 15 11:30:34.671000 audit: BPF prog-id=76 op=UNLOAD Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:34.671000 audit: BPF prog-id=78 op=LOAD Jul 15 11:30:34.671000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000392748 items=0 ppid=1687 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:34.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666435316166323430623866623636353661663532343939613731 Jul 15 11:30:34.692506 env[1206]: time="2025-07-15T11:30:34.692462194Z" level=info msg="StartContainer for \"91f8988e00dee136dbbee281d0b0170baf1be588ae078691a4d321e9f0f1f129\" returns successfully" Jul 15 11:30:34.699601 env[1206]: time="2025-07-15T11:30:34.699554357Z" level=info msg="StartContainer for \"33fd51af240b8fb6656af52499a7129ca99869c3b6be119b09ca7fdcd91fb2af\" returns successfully" Jul 15 11:30:34.748563 env[1206]: time="2025-07-15T11:30:34.748504446Z" level=info msg="StartContainer for \"59ef910acaa544eb5c57c87dda2efe6cfe10aa6dfcbb7743739c1dee863fceb1\" returns successfully" Jul 15 11:30:34.787848 kubelet[1607]: E0715 11:30:34.787802 1607 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.56:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.56:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 15 11:30:35.492725 kernel: kauditd_printk_skb: 557 callbacks suppressed Jul 15 11:30:35.492869 kernel: audit: type=1400 audit(1752579035.486:540): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:35.492896 kernel: audit: type=1300 audit(1752579035.486:540): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00042c390 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:35.486000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:35.486000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00042c390 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:35.486000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:35.505629 kernel: audit: type=1327 audit(1752579035.486:540): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:35.505688 kernel: audit: type=1400 audit(1752579035.486:541): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:35.486000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:35.486000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003187a0 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:35.540238 kernel: audit: type=1300 audit(1752579035.486:541): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003187a0 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:35.540358 kernel: audit: type=1327 audit(1752579035.486:541): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:35.486000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:35.674667 kubelet[1607]: E0715 11:30:35.674621 1607 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:30:35.675086 kubelet[1607]: E0715 11:30:35.674943 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:35.687114 kubelet[1607]: E0715 11:30:35.687084 1607 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:30:35.687454 kubelet[1607]: E0715 11:30:35.687417 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:35.688961 kubelet[1607]: E0715 11:30:35.688939 1607 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:30:35.689034 kubelet[1607]: E0715 11:30:35.689018 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:35.700370 kubelet[1607]: I0715 11:30:35.700331 1607 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:30:36.171000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:36.171000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:36.180405 kernel: audit: type=1400 audit(1752579036.171:542): avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:36.180465 kernel: audit: type=1400 audit(1752579036.171:543): avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:36.180605 kernel: audit: type=1300 audit(1752579036.171:542): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c008dc6450 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:30:36.171000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c008dc6450 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:30:36.189160 kernel: audit: type=1327 audit(1752579036.171:542): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:30:36.171000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:30:36.171000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:36.171000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c008dc64e0 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:30:36.171000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:30:36.171000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0049f22e0 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:30:36.171000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:30:36.179000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:36.179000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0045629f0 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:30:36.179000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:30:36.187000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:36.187000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c00318ff60 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:30:36.187000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:30:36.188000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:36.188000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c00720dfb0 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:30:36.188000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:30:36.307184 kubelet[1607]: I0715 11:30:36.307132 1607 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:30:36.344919 kubelet[1607]: I0715 11:30:36.344859 1607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:36.350640 kubelet[1607]: E0715 11:30:36.350584 1607 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:36.350640 kubelet[1607]: I0715 11:30:36.350615 1607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:36.352195 kubelet[1607]: E0715 11:30:36.352162 1607 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:36.352195 kubelet[1607]: I0715 11:30:36.352180 1607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:36.353753 kubelet[1607]: E0715 11:30:36.353717 1607 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:36.627421 kubelet[1607]: I0715 11:30:36.627305 1607 apiserver.go:52] "Watching apiserver" Jul 15 11:30:36.643630 kubelet[1607]: I0715 11:30:36.643587 1607 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:30:36.690204 kubelet[1607]: I0715 11:30:36.690175 1607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:36.690572 kubelet[1607]: I0715 11:30:36.690435 1607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:36.690606 kubelet[1607]: I0715 11:30:36.690596 1607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:36.692090 kubelet[1607]: E0715 11:30:36.692058 1607 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:36.692287 kubelet[1607]: E0715 11:30:36.692258 1607 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:36.692356 kubelet[1607]: E0715 11:30:36.692319 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:36.692447 kubelet[1607]: E0715 11:30:36.692425 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:36.692578 kubelet[1607]: E0715 11:30:36.692561 1607 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:36.692687 kubelet[1607]: E0715 11:30:36.692662 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:37.691464 kubelet[1607]: I0715 11:30:37.691421 1607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:37.691859 kubelet[1607]: I0715 11:30:37.691649 1607 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:37.697142 kubelet[1607]: E0715 11:30:37.697100 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:37.697733 kubelet[1607]: E0715 11:30:37.697702 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:38.692593 kubelet[1607]: E0715 11:30:38.692562 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:38.692593 kubelet[1607]: E0715 11:30:38.692581 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:39.353546 systemd[1]: Reloading. Jul 15 11:30:39.430262 /usr/lib/systemd/system-generators/torcx-generator[1918]: time="2025-07-15T11:30:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:30:39.430291 /usr/lib/systemd/system-generators/torcx-generator[1918]: time="2025-07-15T11:30:39Z" level=info msg="torcx already run" Jul 15 11:30:39.510419 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:30:39.510813 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:30:39.535284 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.613000 audit: BPF prog-id=79 op=LOAD Jul 15 11:30:39.613000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.614000 audit: BPF prog-id=80 op=LOAD Jul 15 11:30:39.614000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit: BPF prog-id=81 op=LOAD Jul 15 11:30:39.615000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.615000 audit: BPF prog-id=82 op=LOAD Jul 15 11:30:39.615000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:30:39.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit: BPF prog-id=83 op=LOAD Jul 15 11:30:39.618000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit: BPF prog-id=84 op=LOAD Jul 15 11:30:39.618000 audit: BPF prog-id=42 op=UNLOAD Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit: BPF prog-id=85 op=LOAD Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.618000 audit: BPF prog-id=86 op=LOAD Jul 15 11:30:39.618000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:30:39.618000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.619000 audit: BPF prog-id=87 op=LOAD Jul 15 11:30:39.619000 audit: BPF prog-id=45 op=UNLOAD Jul 15 11:30:39.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit: BPF prog-id=88 op=LOAD Jul 15 11:30:39.621000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit: BPF prog-id=89 op=LOAD Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit: BPF prog-id=90 op=LOAD Jul 15 11:30:39.621000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:30:39.621000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.621000 audit: BPF prog-id=91 op=LOAD Jul 15 11:30:39.621000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit: BPF prog-id=92 op=LOAD Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit: BPF prog-id=93 op=LOAD Jul 15 11:30:39.622000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:30:39.622000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit: BPF prog-id=94 op=LOAD Jul 15 11:30:39.623000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.623000 audit: BPF prog-id=95 op=LOAD Jul 15 11:30:39.623000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.624000 audit: BPF prog-id=96 op=LOAD Jul 15 11:30:39.624000 audit: BPF prog-id=63 op=UNLOAD Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit: BPF prog-id=97 op=LOAD Jul 15 11:30:39.625000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit: BPF prog-id=98 op=LOAD Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.625000 audit: BPF prog-id=99 op=LOAD Jul 15 11:30:39.625000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:30:39.625000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:30:39.659571 systemd[1]: Stopping kubelet.service... Jul 15 11:30:39.689065 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:30:39.689273 systemd[1]: Stopped kubelet.service. Jul 15 11:30:39.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:39.689336 systemd[1]: kubelet.service: Consumed 1.028s CPU time. Jul 15 11:30:39.691086 systemd[1]: Starting kubelet.service... Jul 15 11:30:39.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:39.883616 systemd[1]: Started kubelet.service. Jul 15 11:30:39.929768 kubelet[1962]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:30:39.929768 kubelet[1962]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:30:39.929768 kubelet[1962]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:30:39.930262 kubelet[1962]: I0715 11:30:39.929827 1962 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:30:39.941333 kubelet[1962]: I0715 11:30:39.941285 1962 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 15 11:30:39.941333 kubelet[1962]: I0715 11:30:39.941314 1962 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:30:39.941705 kubelet[1962]: I0715 11:30:39.941672 1962 server.go:956] "Client rotation is on, will bootstrap in background" Jul 15 11:30:39.943179 kubelet[1962]: I0715 11:30:39.943166 1962 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 15 11:30:39.946770 kubelet[1962]: I0715 11:30:39.946712 1962 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:30:39.950501 kubelet[1962]: E0715 11:30:39.950450 1962 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:30:39.950501 kubelet[1962]: I0715 11:30:39.950472 1962 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:30:39.954421 kubelet[1962]: I0715 11:30:39.954406 1962 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:30:39.954817 kubelet[1962]: I0715 11:30:39.954740 1962 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:30:39.956359 kubelet[1962]: I0715 11:30:39.954921 1962 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:30:39.956359 kubelet[1962]: I0715 11:30:39.956359 1962 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:30:39.956359 kubelet[1962]: I0715 11:30:39.956372 1962 container_manager_linux.go:303] "Creating device plugin manager" Jul 15 11:30:39.956713 kubelet[1962]: I0715 11:30:39.956440 1962 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:30:39.956713 kubelet[1962]: I0715 11:30:39.956631 1962 kubelet.go:480] "Attempting to sync node with API server" Jul 15 11:30:39.956713 kubelet[1962]: I0715 11:30:39.956644 1962 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:30:39.956713 kubelet[1962]: I0715 11:30:39.956673 1962 kubelet.go:386] "Adding apiserver pod source" Jul 15 11:30:39.956713 kubelet[1962]: I0715 11:30:39.956699 1962 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:30:39.957788 kubelet[1962]: I0715 11:30:39.957759 1962 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:30:39.967000 audit[1962]: AVC avc: denied { mac_admin } for pid=1962 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.967000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:30:39.967000 audit[1962]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000dda990 a1=c000b90fc0 a2=c000dda960 a3=25 items=0 ppid=1 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:39.967000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:30:39.967000 audit[1962]: AVC avc: denied { mac_admin } for pid=1962 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:39.967000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:30:39.967000 audit[1962]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d90ac0 a1=c000b90fd8 a2=c000ddaa20 a3=25 items=0 ppid=1 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:39.967000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.958413 1962 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.962208 1962 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.962250 1962 server.go:1289] "Started kubelet" Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.963695 1962 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.964026 1962 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.964410 1962 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.965045 1962 server.go:317] "Adding debug handlers to kubelet server" Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.968062 1962 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.968109 1962 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.968148 1962 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.968627 1962 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:30:39.970996 kubelet[1962]: I0715 11:30:39.970533 1962 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:30:39.972019 kubelet[1962]: I0715 11:30:39.971982 1962 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:30:39.972114 kubelet[1962]: I0715 11:30:39.972094 1962 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:30:39.973358 kubelet[1962]: I0715 11:30:39.973014 1962 factory.go:223] Registration of the systemd container factory successfully Jul 15 11:30:39.973358 kubelet[1962]: I0715 11:30:39.973098 1962 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:30:39.973756 kubelet[1962]: E0715 11:30:39.973732 1962 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:30:39.974872 kubelet[1962]: I0715 11:30:39.974761 1962 factory.go:223] Registration of the containerd container factory successfully Jul 15 11:30:39.983099 kubelet[1962]: I0715 11:30:39.983024 1962 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 15 11:30:39.984673 kubelet[1962]: I0715 11:30:39.984621 1962 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 15 11:30:39.984673 kubelet[1962]: I0715 11:30:39.984665 1962 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 15 11:30:39.984782 kubelet[1962]: I0715 11:30:39.984734 1962 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:30:39.984782 kubelet[1962]: I0715 11:30:39.984744 1962 kubelet.go:2436] "Starting kubelet main sync loop" Jul 15 11:30:39.984862 kubelet[1962]: E0715 11:30:39.984814 1962 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:30:40.000778 kubelet[1962]: I0715 11:30:40.000742 1962 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:30:40.000778 kubelet[1962]: I0715 11:30:40.000759 1962 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:30:40.000778 kubelet[1962]: I0715 11:30:40.000777 1962 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:30:40.000983 kubelet[1962]: I0715 11:30:40.000878 1962 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:30:40.000983 kubelet[1962]: I0715 11:30:40.000887 1962 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:30:40.000983 kubelet[1962]: I0715 11:30:40.000902 1962 policy_none.go:49] "None policy: Start" Jul 15 11:30:40.000983 kubelet[1962]: I0715 11:30:40.000909 1962 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:30:40.000983 kubelet[1962]: I0715 11:30:40.000916 1962 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:30:40.000983 kubelet[1962]: I0715 11:30:40.000984 1962 state_mem.go:75] "Updated machine memory state" Jul 15 11:30:40.003000 audit[1962]: AVC avc: denied { mac_admin } for pid=1962 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:40.003000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:30:40.003000 audit[1962]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c2eae0 a1=c000b4f8d8 a2=c000c2eab0 a3=25 items=0 ppid=1 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:40.003000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:30:40.004983 kubelet[1962]: E0715 11:30:40.003873 1962 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 15 11:30:40.004983 kubelet[1962]: E0715 11:30:40.004235 1962 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 15 11:30:40.005666 kubelet[1962]: I0715 11:30:40.005638 1962 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:30:40.005723 kubelet[1962]: I0715 11:30:40.005671 1962 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:30:40.006401 kubelet[1962]: I0715 11:30:40.006377 1962 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:30:40.006565 kubelet[1962]: E0715 11:30:40.006543 1962 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:30:40.086391 kubelet[1962]: I0715 11:30:40.086340 1962 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:40.086551 kubelet[1962]: I0715 11:30:40.086524 1962 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:40.086602 kubelet[1962]: I0715 11:30:40.086572 1962 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:40.111354 kubelet[1962]: I0715 11:30:40.111325 1962 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:30:40.182199 kubelet[1962]: E0715 11:30:40.182058 1962 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:40.182419 kubelet[1962]: E0715 11:30:40.182247 1962 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:40.185173 kubelet[1962]: I0715 11:30:40.185134 1962 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 15 11:30:40.185280 kubelet[1962]: I0715 11:30:40.185213 1962 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:30:40.273053 kubelet[1962]: I0715 11:30:40.273011 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b34834d244b85b7c39ea6ab17bd90157-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"b34834d244b85b7c39ea6ab17bd90157\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:40.273053 kubelet[1962]: I0715 11:30:40.273048 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b34834d244b85b7c39ea6ab17bd90157-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"b34834d244b85b7c39ea6ab17bd90157\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:40.273053 kubelet[1962]: I0715 11:30:40.273069 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:40.273330 kubelet[1962]: I0715 11:30:40.273083 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:40.273330 kubelet[1962]: I0715 11:30:40.273095 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b34834d244b85b7c39ea6ab17bd90157-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"b34834d244b85b7c39ea6ab17bd90157\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:40.273330 kubelet[1962]: I0715 11:30:40.273107 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:40.273330 kubelet[1962]: I0715 11:30:40.273118 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:40.273330 kubelet[1962]: I0715 11:30:40.273130 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:40.273475 kubelet[1962]: I0715 11:30:40.273143 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:40.482567 kubelet[1962]: E0715 11:30:40.482456 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:40.482720 kubelet[1962]: E0715 11:30:40.482595 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:40.482784 kubelet[1962]: E0715 11:30:40.482756 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:40.957371 kubelet[1962]: I0715 11:30:40.957313 1962 apiserver.go:52] "Watching apiserver" Jul 15 11:30:40.972819 kubelet[1962]: I0715 11:30:40.972798 1962 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:30:40.995866 kubelet[1962]: I0715 11:30:40.995843 1962 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:40.996104 kubelet[1962]: I0715 11:30:40.996078 1962 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:40.996315 kubelet[1962]: I0715 11:30:40.995982 1962 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:41.001790 kubelet[1962]: E0715 11:30:41.001732 1962 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 15 11:30:41.001917 kubelet[1962]: E0715 11:30:41.001886 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:41.010740 kubelet[1962]: E0715 11:30:41.010458 1962 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:30:41.010740 kubelet[1962]: E0715 11:30:41.010589 1962 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:30:41.010930 kubelet[1962]: E0715 11:30:41.010746 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:41.011165 kubelet[1962]: E0715 11:30:41.011121 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:41.016418 kubelet[1962]: I0715 11:30:41.016341 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=4.016307734 podStartE2EDuration="4.016307734s" podCreationTimestamp="2025-07-15 11:30:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:30:41.016159992 +0000 UTC m=+1.127407441" watchObservedRunningTime="2025-07-15 11:30:41.016307734 +0000 UTC m=+1.127555183" Jul 15 11:30:41.039487 kubelet[1962]: I0715 11:30:41.039412 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.03939076 podStartE2EDuration="1.03939076s" podCreationTimestamp="2025-07-15 11:30:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:30:41.023897934 +0000 UTC m=+1.135145383" watchObservedRunningTime="2025-07-15 11:30:41.03939076 +0000 UTC m=+1.150638209" Jul 15 11:30:41.052327 kubelet[1962]: I0715 11:30:41.052249 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=4.052233126 podStartE2EDuration="4.052233126s" podCreationTimestamp="2025-07-15 11:30:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:30:41.040082938 +0000 UTC m=+1.151330397" watchObservedRunningTime="2025-07-15 11:30:41.052233126 +0000 UTC m=+1.163480575" Jul 15 11:30:41.998146 kubelet[1962]: E0715 11:30:41.998108 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:41.998528 kubelet[1962]: E0715 11:30:41.998227 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:41.998764 kubelet[1962]: E0715 11:30:41.998741 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:42.209718 kernel: kauditd_printk_skb: 272 callbacks suppressed Jul 15 11:30:42.209842 kernel: audit: type=1400 audit(1752579042.207:797): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:42.207000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:42.207000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000319f40 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:42.217219 kernel: audit: type=1300 audit(1752579042.207:797): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000319f40 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:42.217357 kernel: audit: type=1327 audit(1752579042.207:797): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:42.207000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:42.207000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:42.224466 kernel: audit: type=1400 audit(1752579042.207:798): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:42.224515 kernel: audit: type=1300 audit(1752579042.207:798): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013f0020 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:42.207000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013f0020 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:42.229005 kernel: audit: type=1327 audit(1752579042.207:798): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:42.207000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:42.209000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:42.236332 kernel: audit: type=1400 audit(1752579042.209:799): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:42.236383 kernel: audit: type=1300 audit(1752579042.209:799): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0009aa3c0 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:42.209000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0009aa3c0 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:42.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:42.244873 kernel: audit: type=1327 audit(1752579042.209:799): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:42.244921 kernel: audit: type=1400 audit(1752579042.209:800): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:42.209000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:42.209000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000466fc0 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:42.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:42.999191 kubelet[1962]: E0715 11:30:42.999164 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:43.106000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:30:43.106000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0003bfe80 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:30:43.106000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:43.865501 kubelet[1962]: I0715 11:30:43.865470 1962 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:30:43.865832 env[1206]: time="2025-07-15T11:30:43.865794686Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:30:43.866160 kubelet[1962]: I0715 11:30:43.865953 1962 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:30:44.047627 kubelet[1962]: E0715 11:30:44.047583 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:45.001606 kubelet[1962]: E0715 11:30:45.001573 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:45.224149 systemd[1]: Created slice kubepods-besteffort-podcbfa6d98_aa0b_4983_8132_83d42a91a035.slice. Jul 15 11:30:45.306705 kubelet[1962]: I0715 11:30:45.306544 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/cbfa6d98-aa0b-4983-8132-83d42a91a035-kube-proxy\") pod \"kube-proxy-bl5c5\" (UID: \"cbfa6d98-aa0b-4983-8132-83d42a91a035\") " pod="kube-system/kube-proxy-bl5c5" Jul 15 11:30:45.306705 kubelet[1962]: I0715 11:30:45.306594 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cbfa6d98-aa0b-4983-8132-83d42a91a035-xtables-lock\") pod \"kube-proxy-bl5c5\" (UID: \"cbfa6d98-aa0b-4983-8132-83d42a91a035\") " pod="kube-system/kube-proxy-bl5c5" Jul 15 11:30:45.306705 kubelet[1962]: I0715 11:30:45.306614 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fltbd\" (UniqueName: \"kubernetes.io/projected/cbfa6d98-aa0b-4983-8132-83d42a91a035-kube-api-access-fltbd\") pod \"kube-proxy-bl5c5\" (UID: \"cbfa6d98-aa0b-4983-8132-83d42a91a035\") " pod="kube-system/kube-proxy-bl5c5" Jul 15 11:30:45.306705 kubelet[1962]: I0715 11:30:45.306671 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cbfa6d98-aa0b-4983-8132-83d42a91a035-lib-modules\") pod \"kube-proxy-bl5c5\" (UID: \"cbfa6d98-aa0b-4983-8132-83d42a91a035\") " pod="kube-system/kube-proxy-bl5c5" Jul 15 11:30:45.348644 systemd[1]: Created slice kubepods-besteffort-pod18e6ba82_d38c_4946_a07b_477b014ef358.slice. Jul 15 11:30:45.407547 kubelet[1962]: I0715 11:30:45.407488 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/18e6ba82-d38c-4946-a07b-477b014ef358-var-lib-calico\") pod \"tigera-operator-747864d56d-l64kh\" (UID: \"18e6ba82-d38c-4946-a07b-477b014ef358\") " pod="tigera-operator/tigera-operator-747864d56d-l64kh" Jul 15 11:30:45.407761 kubelet[1962]: I0715 11:30:45.407555 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4rnvc\" (UniqueName: \"kubernetes.io/projected/18e6ba82-d38c-4946-a07b-477b014ef358-kube-api-access-4rnvc\") pod \"tigera-operator-747864d56d-l64kh\" (UID: \"18e6ba82-d38c-4946-a07b-477b014ef358\") " pod="tigera-operator/tigera-operator-747864d56d-l64kh" Jul 15 11:30:45.450146 kubelet[1962]: I0715 11:30:45.450105 1962 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:30:45.531139 kubelet[1962]: E0715 11:30:45.531098 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:45.531720 env[1206]: time="2025-07-15T11:30:45.531667114Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bl5c5,Uid:cbfa6d98-aa0b-4983-8132-83d42a91a035,Namespace:kube-system,Attempt:0,}" Jul 15 11:30:45.548053 update_engine[1200]: I0715 11:30:45.548009 1200 update_attempter.cc:509] Updating boot flags... Jul 15 11:30:45.651874 env[1206]: time="2025-07-15T11:30:45.651828473Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-l64kh,Uid:18e6ba82-d38c-4946-a07b-477b014ef358,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:30:45.936505 env[1206]: time="2025-07-15T11:30:45.936269801Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:45.936505 env[1206]: time="2025-07-15T11:30:45.936308014Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:45.936505 env[1206]: time="2025-07-15T11:30:45.936319315Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:45.936840 env[1206]: time="2025-07-15T11:30:45.936796671Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:45.936930 env[1206]: time="2025-07-15T11:30:45.936830536Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:45.936930 env[1206]: time="2025-07-15T11:30:45.936844402Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:45.937035 env[1206]: time="2025-07-15T11:30:45.936847868Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/86b7a167656dcd676107ae9ec3a87bb23c9dd1398ccd9f324cee113e4fce6f32 pid=2065 runtime=io.containerd.runc.v2 Jul 15 11:30:45.937613 env[1206]: time="2025-07-15T11:30:45.937572724Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/63b88a3e333bba6f0543d1803df6ea2015ef4dff9def52cec071bfa6d855b132 pid=2064 runtime=io.containerd.runc.v2 Jul 15 11:30:45.952803 systemd[1]: Started cri-containerd-63b88a3e333bba6f0543d1803df6ea2015ef4dff9def52cec071bfa6d855b132.scope. Jul 15 11:30:45.953549 systemd[1]: Started cri-containerd-86b7a167656dcd676107ae9ec3a87bb23c9dd1398ccd9f324cee113e4fce6f32.scope. Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.963000 audit: BPF prog-id=100 op=LOAD Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2065 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836623761313637363536646364363736313037616539656333613837 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2065 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836623761313637363536646364363736313037616539656333613837 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit: BPF prog-id=101 op=LOAD Jul 15 11:30:45.964000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024550 items=0 ppid=2065 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836623761313637363536646364363736313037616539656333613837 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit: BPF prog-id=102 op=LOAD Jul 15 11:30:45.964000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000024598 items=0 ppid=2065 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836623761313637363536646364363736313037616539656333613837 Jul 15 11:30:45.964000 audit: BPF prog-id=102 op=UNLOAD Jul 15 11:30:45.964000 audit: BPF prog-id=101 op=UNLOAD Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit: BPF prog-id=103 op=LOAD Jul 15 11:30:45.964000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0000249a8 items=0 ppid=2065 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836623761313637363536646364363736313037616539656333613837 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.964000 audit: BPF prog-id=104 op=LOAD Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2064 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623838613365333333626261366630353433643138303364663665 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2064 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623838613365333333626261366630353433643138303364663665 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit: BPF prog-id=105 op=LOAD Jul 15 11:30:45.965000 audit[2089]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00039cd60 items=0 ppid=2064 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623838613365333333626261366630353433643138303364663665 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.965000 audit: BPF prog-id=106 op=LOAD Jul 15 11:30:45.965000 audit[2089]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00039cda8 items=0 ppid=2064 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623838613365333333626261366630353433643138303364663665 Jul 15 11:30:45.966000 audit: BPF prog-id=106 op=UNLOAD Jul 15 11:30:45.966000 audit: BPF prog-id=105 op=UNLOAD Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:45.966000 audit: BPF prog-id=107 op=LOAD Jul 15 11:30:45.966000 audit[2089]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00039d1b8 items=0 ppid=2064 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:45.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623838613365333333626261366630353433643138303364663665 Jul 15 11:30:45.976324 env[1206]: time="2025-07-15T11:30:45.976281815Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bl5c5,Uid:cbfa6d98-aa0b-4983-8132-83d42a91a035,Namespace:kube-system,Attempt:0,} returns sandbox id \"86b7a167656dcd676107ae9ec3a87bb23c9dd1398ccd9f324cee113e4fce6f32\"" Jul 15 11:30:45.977893 kubelet[1962]: E0715 11:30:45.977407 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:45.989817 env[1206]: time="2025-07-15T11:30:45.989776762Z" level=info msg="CreateContainer within sandbox \"86b7a167656dcd676107ae9ec3a87bb23c9dd1398ccd9f324cee113e4fce6f32\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:30:45.990950 env[1206]: time="2025-07-15T11:30:45.990926234Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-l64kh,Uid:18e6ba82-d38c-4946-a07b-477b014ef358,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"63b88a3e333bba6f0543d1803df6ea2015ef4dff9def52cec071bfa6d855b132\"" Jul 15 11:30:45.993356 env[1206]: time="2025-07-15T11:30:45.992083891Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:30:46.005201 env[1206]: time="2025-07-15T11:30:46.005155850Z" level=info msg="CreateContainer within sandbox \"86b7a167656dcd676107ae9ec3a87bb23c9dd1398ccd9f324cee113e4fce6f32\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"909c9ce0777a7b93e037c71f24055724206c3d47dc9984c205feabc9a5b8b9b2\"" Jul 15 11:30:46.005825 env[1206]: time="2025-07-15T11:30:46.005801434Z" level=info msg="StartContainer for \"909c9ce0777a7b93e037c71f24055724206c3d47dc9984c205feabc9a5b8b9b2\"" Jul 15 11:30:46.020664 systemd[1]: Started cri-containerd-909c9ce0777a7b93e037c71f24055724206c3d47dc9984c205feabc9a5b8b9b2.scope. Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff43465a718 items=0 ppid=2065 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930396339636530373737613762393365303337633731663234303535 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit: BPF prog-id=108 op=LOAD Jul 15 11:30:46.033000 audit[2138]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000231fb8 items=0 ppid=2065 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930396339636530373737613762393365303337633731663234303535 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit: BPF prog-id=109 op=LOAD Jul 15 11:30:46.033000 audit[2138]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000400008 items=0 ppid=2065 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930396339636530373737613762393365303337633731663234303535 Jul 15 11:30:46.033000 audit: BPF prog-id=109 op=UNLOAD Jul 15 11:30:46.033000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:46.033000 audit: BPF prog-id=110 op=LOAD Jul 15 11:30:46.033000 audit[2138]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000400098 items=0 ppid=2065 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930396339636530373737613762393365303337633731663234303535 Jul 15 11:30:46.041740 kubelet[1962]: E0715 11:30:46.041559 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:46.047695 env[1206]: time="2025-07-15T11:30:46.047622411Z" level=info msg="StartContainer for \"909c9ce0777a7b93e037c71f24055724206c3d47dc9984c205feabc9a5b8b9b2\" returns successfully" Jul 15 11:30:46.322000 audit[2199]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.322000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd3ed512a0 a2=0 a3=7ffd3ed5128c items=0 ppid=2149 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.322000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:30:46.322000 audit[2200]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.322000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff76a62640 a2=0 a3=7fff76a6262c items=0 ppid=2149 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.322000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:30:46.323000 audit[2202]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.323000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1c990280 a2=0 a3=7fff1c99026c items=0 ppid=2149 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.323000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:30:46.324000 audit[2203]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.324000 audit[2203]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe801c8450 a2=0 a3=7ffe801c843c items=0 ppid=2149 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.324000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:30:46.324000 audit[2204]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.324000 audit[2204]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdcbb278c0 a2=0 a3=7ffdcbb278ac items=0 ppid=2149 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.324000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:30:46.326000 audit[2205]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.326000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb59a6680 a2=0 a3=7fffb59a666c items=0 ppid=2149 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.326000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:30:46.425000 audit[2207]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.425000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff6ad6aa40 a2=0 a3=7fff6ad6aa2c items=0 ppid=2149 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.425000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:30:46.427000 audit[2209]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.427000 audit[2209]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdb0cb3b40 a2=0 a3=7ffdb0cb3b2c items=0 ppid=2149 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.427000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:30:46.430000 audit[2212]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.430000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe71b1fda0 a2=0 a3=7ffe71b1fd8c items=0 ppid=2149 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.430000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:30:46.431000 audit[2213]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.431000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb84cd0c0 a2=0 a3=7fffb84cd0ac items=0 ppid=2149 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.431000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:30:46.433000 audit[2215]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.433000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffed79a26f0 a2=0 a3=7ffed79a26dc items=0 ppid=2149 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.433000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:30:46.434000 audit[2216]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.434000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcb6c82660 a2=0 a3=7ffcb6c8264c items=0 ppid=2149 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.434000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:30:46.436000 audit[2218]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2218 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.436000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff00180290 a2=0 a3=7fff0018027c items=0 ppid=2149 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.436000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:30:46.438000 audit[2221]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.438000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff5f7a6940 a2=0 a3=7fff5f7a692c items=0 ppid=2149 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.438000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:30:46.439000 audit[2222]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.439000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff213280d0 a2=0 a3=7fff213280bc items=0 ppid=2149 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.439000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:30:46.441000 audit[2224]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.441000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffea1170180 a2=0 a3=7ffea117016c items=0 ppid=2149 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.441000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:30:46.442000 audit[2225]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.442000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe601d44b0 a2=0 a3=7ffe601d449c items=0 ppid=2149 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:30:46.444000 audit[2227]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2227 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.444000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd35614160 a2=0 a3=7ffd3561414c items=0 ppid=2149 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.444000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:30:46.446000 audit[2230]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.446000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf8841040 a2=0 a3=7ffcf884102c items=0 ppid=2149 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.446000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:30:46.449000 audit[2233]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2233 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.449000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc9993b790 a2=0 a3=7ffc9993b77c items=0 ppid=2149 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:30:46.450000 audit[2234]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.450000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdb9463df0 a2=0 a3=7ffdb9463ddc items=0 ppid=2149 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:30:46.452000 audit[2236]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.452000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd59032e90 a2=0 a3=7ffd59032e7c items=0 ppid=2149 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:30:46.455000 audit[2239]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.455000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdd6ef35f0 a2=0 a3=7ffdd6ef35dc items=0 ppid=2149 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.455000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:30:46.456000 audit[2240]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.456000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff8b5a68c0 a2=0 a3=7fff8b5a68ac items=0 ppid=2149 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.456000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:30:46.458000 audit[2242]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:30:46.458000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffef47d6740 a2=0 a3=7ffef47d672c items=0 ppid=2149 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.458000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:30:46.476000 audit[2248]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:46.476000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffebd213520 a2=0 a3=7ffebd21350c items=0 ppid=2149 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.476000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:46.485000 audit[2248]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:46.485000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffebd213520 a2=0 a3=7ffebd21350c items=0 ppid=2149 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.485000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:46.486000 audit[2253]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.486000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdd9b6d820 a2=0 a3=7ffdd9b6d80c items=0 ppid=2149 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.486000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:30:46.488000 audit[2255]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.488000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe7d15f990 a2=0 a3=7ffe7d15f97c items=0 ppid=2149 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.488000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:30:46.491000 audit[2258]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.491000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd41cb32b0 a2=0 a3=7ffd41cb329c items=0 ppid=2149 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.491000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:30:46.492000 audit[2259]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2259 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.492000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff84cf1c80 a2=0 a3=7fff84cf1c6c items=0 ppid=2149 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.492000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:30:46.494000 audit[2261]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.494000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff1d2993b0 a2=0 a3=7fff1d29939c items=0 ppid=2149 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.494000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:30:46.495000 audit[2262]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.495000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9b6164a0 a2=0 a3=7fff9b61648c items=0 ppid=2149 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.495000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:30:46.497000 audit[2264]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.497000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdb9e3c740 a2=0 a3=7ffdb9e3c72c items=0 ppid=2149 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.497000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:30:46.500000 audit[2267]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.500000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffcd7c76730 a2=0 a3=7ffcd7c7671c items=0 ppid=2149 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.500000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:30:46.501000 audit[2268]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.501000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc7de9cd80 a2=0 a3=7ffc7de9cd6c items=0 ppid=2149 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.501000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:30:46.503000 audit[2270]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.503000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe1b998560 a2=0 a3=7ffe1b99854c items=0 ppid=2149 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.503000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:30:46.504000 audit[2271]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2271 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.504000 audit[2271]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd8d675c20 a2=0 a3=7ffd8d675c0c items=0 ppid=2149 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.504000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:30:46.507000 audit[2273]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2273 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.507000 audit[2273]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc92b40040 a2=0 a3=7ffc92b4002c items=0 ppid=2149 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.507000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:30:46.511000 audit[2276]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2276 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.511000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc50a063e0 a2=0 a3=7ffc50a063cc items=0 ppid=2149 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.511000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:30:46.515000 audit[2279]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2279 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.515000 audit[2279]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd1548e5c0 a2=0 a3=7ffd1548e5ac items=0 ppid=2149 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.515000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:30:46.516000 audit[2280]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.516000 audit[2280]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd849268e0 a2=0 a3=7ffd849268cc items=0 ppid=2149 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.516000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:30:46.518000 audit[2282]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2282 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.518000 audit[2282]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff3fe6f1d0 a2=0 a3=7fff3fe6f1bc items=0 ppid=2149 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.518000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:30:46.522000 audit[2285]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.522000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff3fa6f690 a2=0 a3=7fff3fa6f67c items=0 ppid=2149 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.522000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:30:46.523000 audit[2286]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.523000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff94ff4f0 a2=0 a3=7ffff94ff4dc items=0 ppid=2149 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.523000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:30:46.525000 audit[2288]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.525000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fffcc49e150 a2=0 a3=7fffcc49e13c items=0 ppid=2149 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.525000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:30:46.526000 audit[2289]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.526000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe03fd0d50 a2=0 a3=7ffe03fd0d3c items=0 ppid=2149 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.526000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:30:46.528000 audit[2291]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.528000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff9bf48ba0 a2=0 a3=7fff9bf48b8c items=0 ppid=2149 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:30:46.531000 audit[2294]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:30:46.531000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd5e43bf40 a2=0 a3=7ffd5e43bf2c items=0 ppid=2149 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.531000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:30:46.534000 audit[2296]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:30:46.534000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffc9d973790 a2=0 a3=7ffc9d97377c items=0 ppid=2149 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.534000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:46.534000 audit[2296]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:30:46.534000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffc9d973790 a2=0 a3=7ffc9d97377c items=0 ppid=2149 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:46.534000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:47.007744 kubelet[1962]: E0715 11:30:47.007717 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:47.008143 kubelet[1962]: E0715 11:30:47.007860 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:47.134065 kubelet[1962]: I0715 11:30:47.133992 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-bl5c5" podStartSLOduration=2.13397289 podStartE2EDuration="2.13397289s" podCreationTimestamp="2025-07-15 11:30:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:30:47.133755598 +0000 UTC m=+7.245003067" watchObservedRunningTime="2025-07-15 11:30:47.13397289 +0000 UTC m=+7.245220329" Jul 15 11:30:48.009571 kubelet[1962]: E0715 11:30:48.009536 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:48.009986 kubelet[1962]: E0715 11:30:48.009732 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:48.699468 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1605393349.mount: Deactivated successfully. Jul 15 11:30:48.869176 kubelet[1962]: E0715 11:30:48.869135 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:49.011466 kubelet[1962]: E0715 11:30:49.011210 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:30:49.680871 env[1206]: time="2025-07-15T11:30:49.680813302Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:49.683165 env[1206]: time="2025-07-15T11:30:49.683127592Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:49.685343 env[1206]: time="2025-07-15T11:30:49.685265179Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:49.686924 env[1206]: time="2025-07-15T11:30:49.686873634Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:49.687566 env[1206]: time="2025-07-15T11:30:49.687528223Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 15 11:30:49.692159 env[1206]: time="2025-07-15T11:30:49.692107581Z" level=info msg="CreateContainer within sandbox \"63b88a3e333bba6f0543d1803df6ea2015ef4dff9def52cec071bfa6d855b132\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:30:49.712205 env[1206]: time="2025-07-15T11:30:49.712143850Z" level=info msg="CreateContainer within sandbox \"63b88a3e333bba6f0543d1803df6ea2015ef4dff9def52cec071bfa6d855b132\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"392703dbdb4474afd8da43209754ccf0db0ee6fd21dd0f050e9b17b5d1df9291\"" Jul 15 11:30:49.713703 env[1206]: time="2025-07-15T11:30:49.712724510Z" level=info msg="StartContainer for \"392703dbdb4474afd8da43209754ccf0db0ee6fd21dd0f050e9b17b5d1df9291\"" Jul 15 11:30:49.730412 systemd[1]: Started cri-containerd-392703dbdb4474afd8da43209754ccf0db0ee6fd21dd0f050e9b17b5d1df9291.scope. Jul 15 11:30:49.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.741007 kernel: kauditd_printk_skb: 315 callbacks suppressed Jul 15 11:30:49.741178 kernel: audit: type=1400 audit(1752579049.739:895): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.747354 kernel: audit: type=1400 audit(1752579049.739:896): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.747407 kernel: audit: type=1400 audit(1752579049.739:897): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.750711 kernel: audit: type=1400 audit(1752579049.739:898): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.757042 kernel: audit: type=1400 audit(1752579049.739:899): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.757098 kernel: audit: type=1400 audit(1752579049.739:900): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.762845 kernel: audit: type=1400 audit(1752579049.739:901): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.762887 kernel: audit: type=1400 audit(1752579049.739:902): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.768488 kernel: audit: type=1400 audit(1752579049.739:903): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.768539 kernel: audit: type=1400 audit(1752579049.743:904): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit: BPF prog-id=111 op=LOAD Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2064 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:49.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323730336462646234343734616664386461343332303937353463 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2064 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:49.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323730336462646234343734616664386461343332303937353463 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.743000 audit: BPF prog-id=112 op=LOAD Jul 15 11:30:49.743000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00037e050 items=0 ppid=2064 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:49.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323730336462646234343734616664386461343332303937353463 Jul 15 11:30:49.746000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.746000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.746000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.746000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.746000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.746000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.746000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.746000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.746000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.746000 audit: BPF prog-id=113 op=LOAD Jul 15 11:30:49.746000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00037e098 items=0 ppid=2064 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:49.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323730336462646234343734616664386461343332303937353463 Jul 15 11:30:49.753000 audit: BPF prog-id=113 op=UNLOAD Jul 15 11:30:49.753000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:49.753000 audit: BPF prog-id=114 op=LOAD Jul 15 11:30:49.753000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00037e4a8 items=0 ppid=2064 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:49.753000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323730336462646234343734616664386461343332303937353463 Jul 15 11:30:49.784938 env[1206]: time="2025-07-15T11:30:49.784877423Z" level=info msg="StartContainer for \"392703dbdb4474afd8da43209754ccf0db0ee6fd21dd0f050e9b17b5d1df9291\" returns successfully" Jul 15 11:30:50.023800 kubelet[1962]: I0715 11:30:50.022527 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-l64kh" podStartSLOduration=1.325984753 podStartE2EDuration="5.0225146s" podCreationTimestamp="2025-07-15 11:30:45 +0000 UTC" firstStartedPulling="2025-07-15 11:30:45.991759366 +0000 UTC m=+6.103006815" lastFinishedPulling="2025-07-15 11:30:49.688289213 +0000 UTC m=+9.799536662" observedRunningTime="2025-07-15 11:30:50.022215675 +0000 UTC m=+10.133463124" watchObservedRunningTime="2025-07-15 11:30:50.0225146 +0000 UTC m=+10.133762050" Jul 15 11:30:53.033000 audit: BPF prog-id=111 op=UNLOAD Jul 15 11:30:53.033842 systemd[1]: cri-containerd-392703dbdb4474afd8da43209754ccf0db0ee6fd21dd0f050e9b17b5d1df9291.scope: Deactivated successfully. Jul 15 11:30:53.036000 audit: BPF prog-id=114 op=UNLOAD Jul 15 11:30:53.054793 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-392703dbdb4474afd8da43209754ccf0db0ee6fd21dd0f050e9b17b5d1df9291-rootfs.mount: Deactivated successfully. Jul 15 11:30:53.696630 env[1206]: time="2025-07-15T11:30:53.696569671Z" level=info msg="shim disconnected" id=392703dbdb4474afd8da43209754ccf0db0ee6fd21dd0f050e9b17b5d1df9291 Jul 15 11:30:53.696630 env[1206]: time="2025-07-15T11:30:53.696627419Z" level=warning msg="cleaning up after shim disconnected" id=392703dbdb4474afd8da43209754ccf0db0ee6fd21dd0f050e9b17b5d1df9291 namespace=k8s.io Jul 15 11:30:53.696630 env[1206]: time="2025-07-15T11:30:53.696637859Z" level=info msg="cleaning up dead shim" Jul 15 11:30:53.702616 env[1206]: time="2025-07-15T11:30:53.702552301Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:30:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2352 runtime=io.containerd.runc.v2\n" Jul 15 11:30:54.021178 kubelet[1962]: I0715 11:30:54.021053 1962 scope.go:117] "RemoveContainer" containerID="392703dbdb4474afd8da43209754ccf0db0ee6fd21dd0f050e9b17b5d1df9291" Jul 15 11:30:54.022886 env[1206]: time="2025-07-15T11:30:54.022759968Z" level=info msg="CreateContainer within sandbox \"63b88a3e333bba6f0543d1803df6ea2015ef4dff9def52cec071bfa6d855b132\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 15 11:30:54.142845 env[1206]: time="2025-07-15T11:30:54.142776142Z" level=info msg="CreateContainer within sandbox \"63b88a3e333bba6f0543d1803df6ea2015ef4dff9def52cec071bfa6d855b132\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"1382ccbff384ca6d061326b5e7afeb99b24152c2db0b42da6bb9c8edb0e28011\"" Jul 15 11:30:54.143699 env[1206]: time="2025-07-15T11:30:54.143643900Z" level=info msg="StartContainer for \"1382ccbff384ca6d061326b5e7afeb99b24152c2db0b42da6bb9c8edb0e28011\"" Jul 15 11:30:54.160085 systemd[1]: run-containerd-runc-k8s.io-1382ccbff384ca6d061326b5e7afeb99b24152c2db0b42da6bb9c8edb0e28011-runc.TLmmB8.mount: Deactivated successfully. Jul 15 11:30:54.161304 systemd[1]: Started cri-containerd-1382ccbff384ca6d061326b5e7afeb99b24152c2db0b42da6bb9c8edb0e28011.scope. Jul 15 11:30:54.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit: BPF prog-id=115 op=LOAD Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=2064 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:54.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133383263636266663338346361366430363133323662356537616665 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=2064 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:54.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133383263636266663338346361366430363133323662356537616665 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit: BPF prog-id=116 op=LOAD Jul 15 11:30:54.174000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000251d10 items=0 ppid=2064 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:54.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133383263636266663338346361366430363133323662356537616665 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit: BPF prog-id=117 op=LOAD Jul 15 11:30:54.174000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c000251d58 items=0 ppid=2064 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:54.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133383263636266663338346361366430363133323662356537616665 Jul 15 11:30:54.174000 audit: BPF prog-id=117 op=UNLOAD Jul 15 11:30:54.174000 audit: BPF prog-id=116 op=UNLOAD Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:54.174000 audit: BPF prog-id=118 op=LOAD Jul 15 11:30:54.174000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0003a2168 items=0 ppid=2064 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:54.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133383263636266663338346361366430363133323662356537616665 Jul 15 11:30:54.191002 env[1206]: time="2025-07-15T11:30:54.190948532Z" level=info msg="StartContainer for \"1382ccbff384ca6d061326b5e7afeb99b24152c2db0b42da6bb9c8edb0e28011\" returns successfully" Jul 15 11:30:56.860081 sudo[1344]: pam_unix(sudo:session): session closed for user root Jul 15 11:30:56.859000 audit[1344]: USER_END pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:56.861181 kernel: kauditd_printk_skb: 106 callbacks suppressed Jul 15 11:30:56.861236 kernel: audit: type=1106 audit(1752579056.859:933): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:56.861714 sshd[1341]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:56.863728 systemd[1]: sshd@6-10.0.0.56:22-10.0.0.1:48050.service: Deactivated successfully. Jul 15 11:30:56.864326 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:30:56.864436 systemd[1]: session-7.scope: Consumed 5.184s CPU time. Jul 15 11:30:56.864745 systemd-logind[1193]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:30:56.859000 audit[1344]: CRED_DISP pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:56.865447 systemd-logind[1193]: Removed session 7. Jul 15 11:30:56.869021 kernel: audit: type=1104 audit(1752579056.859:934): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:56.869073 kernel: audit: type=1106 audit(1752579056.860:935): pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:56.860000 audit[1341]: USER_END pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:56.873773 kernel: audit: type=1104 audit(1752579056.860:936): pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:56.860000 audit[1341]: CRED_DISP pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:56.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.56:22-10.0.0.1:48050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:56.881330 kernel: audit: type=1131 audit(1752579056.860:937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.56:22-10.0.0.1:48050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:58.464000 audit[2459]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:58.464000 audit[2459]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdf0ab4640 a2=0 a3=7ffdf0ab462c items=0 ppid=2149 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:58.472327 kernel: audit: type=1325 audit(1752579058.464:938): table=filter:89 family=2 entries=14 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:58.472387 kernel: audit: type=1300 audit(1752579058.464:938): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdf0ab4640 a2=0 a3=7ffdf0ab462c items=0 ppid=2149 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:58.472521 kernel: audit: type=1327 audit(1752579058.464:938): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:58.464000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:58.472000 audit[2459]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:58.476985 kernel: audit: type=1325 audit(1752579058.472:939): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:58.472000 audit[2459]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdf0ab4640 a2=0 a3=0 items=0 ppid=2149 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:58.485874 kernel: audit: type=1300 audit(1752579058.472:939): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdf0ab4640 a2=0 a3=0 items=0 ppid=2149 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:58.472000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:58.483000 audit[2461]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=2461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:58.483000 audit[2461]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe6c2c6d00 a2=0 a3=7ffe6c2c6cec items=0 ppid=2149 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:58.483000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:58.492000 audit[2461]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:58.492000 audit[2461]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe6c2c6d00 a2=0 a3=0 items=0 ppid=2149 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:58.492000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:00.863000 audit[2464]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:00.863000 audit[2464]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffda7b5f7e0 a2=0 a3=7ffda7b5f7cc items=0 ppid=2149 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.863000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:00.869000 audit[2464]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:00.869000 audit[2464]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffda7b5f7e0 a2=0 a3=0 items=0 ppid=2149 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.869000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:00.879000 audit[2466]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:00.879000 audit[2466]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe3bc35a60 a2=0 a3=7ffe3bc35a4c items=0 ppid=2149 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:00.884000 audit[2466]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:00.884000 audit[2466]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe3bc35a60 a2=0 a3=0 items=0 ppid=2149 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.884000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:00.976014 systemd[1]: Created slice kubepods-besteffort-podd2e40e93_6e3c_4b1b_a0a8_97b906afa95e.slice. Jul 15 11:31:01.011726 kubelet[1962]: I0715 11:31:01.011658 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8cb4b\" (UniqueName: \"kubernetes.io/projected/d2e40e93-6e3c-4b1b-a0a8-97b906afa95e-kube-api-access-8cb4b\") pod \"calico-typha-6676df8558-d276h\" (UID: \"d2e40e93-6e3c-4b1b-a0a8-97b906afa95e\") " pod="calico-system/calico-typha-6676df8558-d276h" Jul 15 11:31:01.011726 kubelet[1962]: I0715 11:31:01.011721 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/d2e40e93-6e3c-4b1b-a0a8-97b906afa95e-typha-certs\") pod \"calico-typha-6676df8558-d276h\" (UID: \"d2e40e93-6e3c-4b1b-a0a8-97b906afa95e\") " pod="calico-system/calico-typha-6676df8558-d276h" Jul 15 11:31:01.012122 kubelet[1962]: I0715 11:31:01.011742 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d2e40e93-6e3c-4b1b-a0a8-97b906afa95e-tigera-ca-bundle\") pod \"calico-typha-6676df8558-d276h\" (UID: \"d2e40e93-6e3c-4b1b-a0a8-97b906afa95e\") " pod="calico-system/calico-typha-6676df8558-d276h" Jul 15 11:31:01.069726 systemd[1]: Created slice kubepods-besteffort-pod9c979573_9a35_42d5_a4ff_c3ff100e45d9.slice. Jul 15 11:31:01.112584 kubelet[1962]: I0715 11:31:01.112533 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/9c979573-9a35-42d5-a4ff-c3ff100e45d9-cni-log-dir\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112584 kubelet[1962]: I0715 11:31:01.112569 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9c979573-9a35-42d5-a4ff-c3ff100e45d9-tigera-ca-bundle\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112584 kubelet[1962]: I0715 11:31:01.112587 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/9c979573-9a35-42d5-a4ff-c3ff100e45d9-node-certs\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112806 kubelet[1962]: I0715 11:31:01.112602 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/9c979573-9a35-42d5-a4ff-c3ff100e45d9-policysync\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112806 kubelet[1962]: I0715 11:31:01.112617 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9c979573-9a35-42d5-a4ff-c3ff100e45d9-var-lib-calico\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112806 kubelet[1962]: I0715 11:31:01.112645 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/9c979573-9a35-42d5-a4ff-c3ff100e45d9-flexvol-driver-host\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112806 kubelet[1962]: I0715 11:31:01.112672 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9c979573-9a35-42d5-a4ff-c3ff100e45d9-lib-modules\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112806 kubelet[1962]: I0715 11:31:01.112713 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/9c979573-9a35-42d5-a4ff-c3ff100e45d9-cni-bin-dir\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112925 kubelet[1962]: I0715 11:31:01.112736 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/9c979573-9a35-42d5-a4ff-c3ff100e45d9-var-run-calico\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112925 kubelet[1962]: I0715 11:31:01.112748 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9c979573-9a35-42d5-a4ff-c3ff100e45d9-xtables-lock\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112925 kubelet[1962]: I0715 11:31:01.112761 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nfqcg\" (UniqueName: \"kubernetes.io/projected/9c979573-9a35-42d5-a4ff-c3ff100e45d9-kube-api-access-nfqcg\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.112925 kubelet[1962]: I0715 11:31:01.112773 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/9c979573-9a35-42d5-a4ff-c3ff100e45d9-cni-net-dir\") pod \"calico-node-w8lx7\" (UID: \"9c979573-9a35-42d5-a4ff-c3ff100e45d9\") " pod="calico-system/calico-node-w8lx7" Jul 15 11:31:01.206013 kubelet[1962]: E0715 11:31:01.205958 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnmdh" podUID="b2372bb1-56e8-428a-9553-632abd324bfd" Jul 15 11:31:01.216579 kubelet[1962]: E0715 11:31:01.216540 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.216579 kubelet[1962]: W0715 11:31:01.216576 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.216741 kubelet[1962]: E0715 11:31:01.216597 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.217172 kubelet[1962]: E0715 11:31:01.217142 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.217172 kubelet[1962]: W0715 11:31:01.217165 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.217247 kubelet[1962]: E0715 11:31:01.217180 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.217519 kubelet[1962]: E0715 11:31:01.217495 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.217519 kubelet[1962]: W0715 11:31:01.217511 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.217598 kubelet[1962]: E0715 11:31:01.217524 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.217713 kubelet[1962]: E0715 11:31:01.217673 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.217713 kubelet[1962]: W0715 11:31:01.217708 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.217788 kubelet[1962]: E0715 11:31:01.217730 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.217900 kubelet[1962]: E0715 11:31:01.217876 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.217900 kubelet[1962]: W0715 11:31:01.217890 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.217900 kubelet[1962]: E0715 11:31:01.217897 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.218169 kubelet[1962]: E0715 11:31:01.218138 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.218169 kubelet[1962]: W0715 11:31:01.218154 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.218169 kubelet[1962]: E0715 11:31:01.218165 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.219561 kubelet[1962]: E0715 11:31:01.218999 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.219561 kubelet[1962]: W0715 11:31:01.219011 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.219561 kubelet[1962]: E0715 11:31:01.219020 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.221354 kubelet[1962]: E0715 11:31:01.221074 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.221354 kubelet[1962]: W0715 11:31:01.221090 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.221354 kubelet[1962]: E0715 11:31:01.221102 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.226282 kubelet[1962]: E0715 11:31:01.225942 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.226282 kubelet[1962]: W0715 11:31:01.225956 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.226282 kubelet[1962]: E0715 11:31:01.225965 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.226527 kubelet[1962]: E0715 11:31:01.226517 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.226559 kubelet[1962]: W0715 11:31:01.226528 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.226559 kubelet[1962]: E0715 11:31:01.226539 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.226812 kubelet[1962]: E0715 11:31:01.226748 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.226812 kubelet[1962]: W0715 11:31:01.226772 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.226812 kubelet[1962]: E0715 11:31:01.226781 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.281574 kubelet[1962]: E0715 11:31:01.281540 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:01.282105 env[1206]: time="2025-07-15T11:31:01.282055540Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6676df8558-d276h,Uid:d2e40e93-6e3c-4b1b-a0a8-97b906afa95e,Namespace:calico-system,Attempt:0,}" Jul 15 11:31:01.300115 kubelet[1962]: E0715 11:31:01.300084 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.300115 kubelet[1962]: W0715 11:31:01.300105 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.300355 kubelet[1962]: E0715 11:31:01.300126 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.300355 kubelet[1962]: E0715 11:31:01.300295 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.300355 kubelet[1962]: W0715 11:31:01.300303 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.300355 kubelet[1962]: E0715 11:31:01.300315 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.300507 kubelet[1962]: E0715 11:31:01.300487 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.300711 env[1206]: time="2025-07-15T11:31:01.300548126Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:01.300711 env[1206]: time="2025-07-15T11:31:01.300598221Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:01.300711 env[1206]: time="2025-07-15T11:31:01.300608149Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:01.300846 kubelet[1962]: W0715 11:31:01.300829 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.300894 env[1206]: time="2025-07-15T11:31:01.300820419Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ca9461d01d7523d6496d0e9ad45f48fa0ce4d615632e48d45ec67293d4240d58 pid=2490 runtime=io.containerd.runc.v2 Jul 15 11:31:01.300952 kubelet[1962]: E0715 11:31:01.300937 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.301217 kubelet[1962]: E0715 11:31:01.301206 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.301294 kubelet[1962]: W0715 11:31:01.301279 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.301374 kubelet[1962]: E0715 11:31:01.301359 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.301694 kubelet[1962]: E0715 11:31:01.301651 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.301694 kubelet[1962]: W0715 11:31:01.301672 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.301774 kubelet[1962]: E0715 11:31:01.301710 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.301903 kubelet[1962]: E0715 11:31:01.301890 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.301903 kubelet[1962]: W0715 11:31:01.301900 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.301955 kubelet[1962]: E0715 11:31:01.301908 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.302072 kubelet[1962]: E0715 11:31:01.302058 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.302146 kubelet[1962]: W0715 11:31:01.302131 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.302227 kubelet[1962]: E0715 11:31:01.302211 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.302461 kubelet[1962]: E0715 11:31:01.302439 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.302537 kubelet[1962]: W0715 11:31:01.302521 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.302646 kubelet[1962]: E0715 11:31:01.302598 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.302942 kubelet[1962]: E0715 11:31:01.302931 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.303017 kubelet[1962]: W0715 11:31:01.303001 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.303089 kubelet[1962]: E0715 11:31:01.303074 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.303317 kubelet[1962]: E0715 11:31:01.303306 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.303395 kubelet[1962]: W0715 11:31:01.303380 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.303486 kubelet[1962]: E0715 11:31:01.303470 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.303819 kubelet[1962]: E0715 11:31:01.303807 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.303905 kubelet[1962]: W0715 11:31:01.303889 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.303987 kubelet[1962]: E0715 11:31:01.303972 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.304239 kubelet[1962]: E0715 11:31:01.304228 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.304315 kubelet[1962]: W0715 11:31:01.304299 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.304395 kubelet[1962]: E0715 11:31:01.304380 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.304641 kubelet[1962]: E0715 11:31:01.304630 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.304731 kubelet[1962]: W0715 11:31:01.304715 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.304817 kubelet[1962]: E0715 11:31:01.304803 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.305027 kubelet[1962]: E0715 11:31:01.305015 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.305104 kubelet[1962]: W0715 11:31:01.305088 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.305179 kubelet[1962]: E0715 11:31:01.305164 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.305403 kubelet[1962]: E0715 11:31:01.305392 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.305490 kubelet[1962]: W0715 11:31:01.305474 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.305574 kubelet[1962]: E0715 11:31:01.305560 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.305845 kubelet[1962]: E0715 11:31:01.305834 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.305926 kubelet[1962]: W0715 11:31:01.305910 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.306001 kubelet[1962]: E0715 11:31:01.305986 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.306234 kubelet[1962]: E0715 11:31:01.306223 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.306308 kubelet[1962]: W0715 11:31:01.306293 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.306380 kubelet[1962]: E0715 11:31:01.306365 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.306620 kubelet[1962]: E0715 11:31:01.306609 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.306717 kubelet[1962]: W0715 11:31:01.306701 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.306796 kubelet[1962]: E0715 11:31:01.306781 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.307020 kubelet[1962]: E0715 11:31:01.307010 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.307095 kubelet[1962]: W0715 11:31:01.307079 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.307172 kubelet[1962]: E0715 11:31:01.307155 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.307386 kubelet[1962]: E0715 11:31:01.307375 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.307477 kubelet[1962]: W0715 11:31:01.307461 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.307549 kubelet[1962]: E0715 11:31:01.307534 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.311616 systemd[1]: Started cri-containerd-ca9461d01d7523d6496d0e9ad45f48fa0ce4d615632e48d45ec67293d4240d58.scope. Jul 15 11:31:01.314968 kubelet[1962]: E0715 11:31:01.314951 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.315065 kubelet[1962]: W0715 11:31:01.315049 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.315149 kubelet[1962]: E0715 11:31:01.315133 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.315240 kubelet[1962]: I0715 11:31:01.315224 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/b2372bb1-56e8-428a-9553-632abd324bfd-socket-dir\") pod \"csi-node-driver-hnmdh\" (UID: \"b2372bb1-56e8-428a-9553-632abd324bfd\") " pod="calico-system/csi-node-driver-hnmdh" Jul 15 11:31:01.315575 kubelet[1962]: E0715 11:31:01.315542 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.315625 kubelet[1962]: W0715 11:31:01.315577 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.315625 kubelet[1962]: E0715 11:31:01.315600 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.315813 kubelet[1962]: E0715 11:31:01.315797 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.315869 kubelet[1962]: W0715 11:31:01.315818 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.315869 kubelet[1962]: E0715 11:31:01.315826 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.316031 kubelet[1962]: E0715 11:31:01.316016 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.316031 kubelet[1962]: W0715 11:31:01.316026 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.316106 kubelet[1962]: E0715 11:31:01.316034 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.316106 kubelet[1962]: I0715 11:31:01.316058 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/b2372bb1-56e8-428a-9553-632abd324bfd-registration-dir\") pod \"csi-node-driver-hnmdh\" (UID: \"b2372bb1-56e8-428a-9553-632abd324bfd\") " pod="calico-system/csi-node-driver-hnmdh" Jul 15 11:31:01.316291 kubelet[1962]: E0715 11:31:01.316274 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.316291 kubelet[1962]: W0715 11:31:01.316286 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.316291 kubelet[1962]: E0715 11:31:01.316293 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.316385 kubelet[1962]: I0715 11:31:01.316311 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/b2372bb1-56e8-428a-9553-632abd324bfd-varrun\") pod \"csi-node-driver-hnmdh\" (UID: \"b2372bb1-56e8-428a-9553-632abd324bfd\") " pod="calico-system/csi-node-driver-hnmdh" Jul 15 11:31:01.316551 kubelet[1962]: E0715 11:31:01.316536 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.316551 kubelet[1962]: W0715 11:31:01.316547 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.316655 kubelet[1962]: E0715 11:31:01.316555 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.316655 kubelet[1962]: I0715 11:31:01.316575 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/b2372bb1-56e8-428a-9553-632abd324bfd-kubelet-dir\") pod \"csi-node-driver-hnmdh\" (UID: \"b2372bb1-56e8-428a-9553-632abd324bfd\") " pod="calico-system/csi-node-driver-hnmdh" Jul 15 11:31:01.316913 kubelet[1962]: E0715 11:31:01.316893 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.316913 kubelet[1962]: W0715 11:31:01.316910 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.316961 kubelet[1962]: E0715 11:31:01.316930 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.317151 kubelet[1962]: E0715 11:31:01.317133 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.317197 kubelet[1962]: W0715 11:31:01.317153 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.317197 kubelet[1962]: E0715 11:31:01.317162 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.317393 kubelet[1962]: E0715 11:31:01.317376 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.317443 kubelet[1962]: W0715 11:31:01.317387 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.317443 kubelet[1962]: E0715 11:31:01.317405 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.317640 kubelet[1962]: E0715 11:31:01.317615 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.317640 kubelet[1962]: W0715 11:31:01.317635 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.317640 kubelet[1962]: E0715 11:31:01.317642 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.317877 kubelet[1962]: E0715 11:31:01.317859 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.317930 kubelet[1962]: W0715 11:31:01.317880 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.317930 kubelet[1962]: E0715 11:31:01.317889 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.317930 kubelet[1962]: I0715 11:31:01.317916 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gqmv7\" (UniqueName: \"kubernetes.io/projected/b2372bb1-56e8-428a-9553-632abd324bfd-kube-api-access-gqmv7\") pod \"csi-node-driver-hnmdh\" (UID: \"b2372bb1-56e8-428a-9553-632abd324bfd\") " pod="calico-system/csi-node-driver-hnmdh" Jul 15 11:31:01.318117 kubelet[1962]: E0715 11:31:01.318099 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.318117 kubelet[1962]: W0715 11:31:01.318112 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.318184 kubelet[1962]: E0715 11:31:01.318122 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.318323 kubelet[1962]: E0715 11:31:01.318295 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.318323 kubelet[1962]: W0715 11:31:01.318310 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.318323 kubelet[1962]: E0715 11:31:01.318318 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.318500 kubelet[1962]: E0715 11:31:01.318484 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.318500 kubelet[1962]: W0715 11:31:01.318494 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.318500 kubelet[1962]: E0715 11:31:01.318503 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.318651 kubelet[1962]: E0715 11:31:01.318634 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.318720 kubelet[1962]: W0715 11:31:01.318654 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.318720 kubelet[1962]: E0715 11:31:01.318663 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit: BPF prog-id=119 op=LOAD Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2490 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393436316430316437353233643634393664306539616434356634 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2490 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393436316430316437353233643634393664306539616434356634 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit: BPF prog-id=120 op=LOAD Jul 15 11:31:01.323000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00030ab70 items=0 ppid=2490 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393436316430316437353233643634393664306539616434356634 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit: BPF prog-id=121 op=LOAD Jul 15 11:31:01.323000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00030abb8 items=0 ppid=2490 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393436316430316437353233643634393664306539616434356634 Jul 15 11:31:01.323000 audit: BPF prog-id=121 op=UNLOAD Jul 15 11:31:01.323000 audit: BPF prog-id=120 op=UNLOAD Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.323000 audit: BPF prog-id=122 op=LOAD Jul 15 11:31:01.323000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00030afc8 items=0 ppid=2490 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393436316430316437353233643634393664306539616434356634 Jul 15 11:31:01.349404 env[1206]: time="2025-07-15T11:31:01.348773318Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6676df8558-d276h,Uid:d2e40e93-6e3c-4b1b-a0a8-97b906afa95e,Namespace:calico-system,Attempt:0,} returns sandbox id \"ca9461d01d7523d6496d0e9ad45f48fa0ce4d615632e48d45ec67293d4240d58\"" Jul 15 11:31:01.354515 kubelet[1962]: E0715 11:31:01.354101 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:01.355406 env[1206]: time="2025-07-15T11:31:01.355375272Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:31:01.373084 env[1206]: time="2025-07-15T11:31:01.373049567Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-w8lx7,Uid:9c979573-9a35-42d5-a4ff-c3ff100e45d9,Namespace:calico-system,Attempt:0,}" Jul 15 11:31:01.389660 env[1206]: time="2025-07-15T11:31:01.389590499Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:01.389660 env[1206]: time="2025-07-15T11:31:01.389626506Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:01.389660 env[1206]: time="2025-07-15T11:31:01.389637216Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:01.389905 env[1206]: time="2025-07-15T11:31:01.389838676Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d0c6a5d40ccc371a60941ff3e7657850646f037f8b6c735347c527294a8499a5 pid=2567 runtime=io.containerd.runc.v2 Jul 15 11:31:01.399507 systemd[1]: Started cri-containerd-d0c6a5d40ccc371a60941ff3e7657850646f037f8b6c735347c527294a8499a5.scope. Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.409000 audit: BPF prog-id=123 op=LOAD Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2567 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430633661356434306363633337316136303934316666336537363537 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2567 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430633661356434306363633337316136303934316666336537363537 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit: BPF prog-id=124 op=LOAD Jul 15 11:31:01.410000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001df970 items=0 ppid=2567 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430633661356434306363633337316136303934316666336537363537 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit: BPF prog-id=125 op=LOAD Jul 15 11:31:01.410000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001df9b8 items=0 ppid=2567 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430633661356434306363633337316136303934316666336537363537 Jul 15 11:31:01.410000 audit: BPF prog-id=125 op=UNLOAD Jul 15 11:31:01.410000 audit: BPF prog-id=124 op=UNLOAD Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:01.410000 audit: BPF prog-id=126 op=LOAD Jul 15 11:31:01.410000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0001dfdc8 items=0 ppid=2567 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430633661356434306363633337316136303934316666336537363537 Jul 15 11:31:01.418658 kubelet[1962]: E0715 11:31:01.418636 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.418658 kubelet[1962]: W0715 11:31:01.418654 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.418780 kubelet[1962]: E0715 11:31:01.418670 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.418934 kubelet[1962]: E0715 11:31:01.418918 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.419005 kubelet[1962]: W0715 11:31:01.418938 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.419005 kubelet[1962]: E0715 11:31:01.418948 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.419162 kubelet[1962]: E0715 11:31:01.419147 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.419162 kubelet[1962]: W0715 11:31:01.419158 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.419162 kubelet[1962]: E0715 11:31:01.419165 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.419332 kubelet[1962]: E0715 11:31:01.419319 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.419332 kubelet[1962]: W0715 11:31:01.419328 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.419332 kubelet[1962]: E0715 11:31:01.419336 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.419509 kubelet[1962]: E0715 11:31:01.419491 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.419509 kubelet[1962]: W0715 11:31:01.419502 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.419509 kubelet[1962]: E0715 11:31:01.419509 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.419904 kubelet[1962]: E0715 11:31:01.419807 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.419904 kubelet[1962]: W0715 11:31:01.419818 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.419904 kubelet[1962]: E0715 11:31:01.419826 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.420263 kubelet[1962]: E0715 11:31:01.420174 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.420263 kubelet[1962]: W0715 11:31:01.420184 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.420263 kubelet[1962]: E0715 11:31:01.420192 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.420495 kubelet[1962]: E0715 11:31:01.420385 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.420495 kubelet[1962]: W0715 11:31:01.420397 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.420495 kubelet[1962]: E0715 11:31:01.420405 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.420732 kubelet[1962]: E0715 11:31:01.420625 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.420732 kubelet[1962]: W0715 11:31:01.420636 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.420732 kubelet[1962]: E0715 11:31:01.420644 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.422395 kubelet[1962]: E0715 11:31:01.422313 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.422395 kubelet[1962]: W0715 11:31:01.422322 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.422395 kubelet[1962]: E0715 11:31:01.422330 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.422575 kubelet[1962]: E0715 11:31:01.422563 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.422650 kubelet[1962]: W0715 11:31:01.422635 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.422750 kubelet[1962]: E0715 11:31:01.422735 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.422964 kubelet[1962]: E0715 11:31:01.422953 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.423037 kubelet[1962]: W0715 11:31:01.423023 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.423117 kubelet[1962]: E0715 11:31:01.423101 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.423595 kubelet[1962]: E0715 11:31:01.423585 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.423665 kubelet[1962]: W0715 11:31:01.423650 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.423767 kubelet[1962]: E0715 11:31:01.423753 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.424044 env[1206]: time="2025-07-15T11:31:01.424016774Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-w8lx7,Uid:9c979573-9a35-42d5-a4ff-c3ff100e45d9,Namespace:calico-system,Attempt:0,} returns sandbox id \"d0c6a5d40ccc371a60941ff3e7657850646f037f8b6c735347c527294a8499a5\"" Jul 15 11:31:01.424155 kubelet[1962]: E0715 11:31:01.424143 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.424227 kubelet[1962]: W0715 11:31:01.424212 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.424304 kubelet[1962]: E0715 11:31:01.424289 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.424667 kubelet[1962]: E0715 11:31:01.424658 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.424758 kubelet[1962]: W0715 11:31:01.424743 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.424837 kubelet[1962]: E0715 11:31:01.424822 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.425349 kubelet[1962]: E0715 11:31:01.425339 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.425421 kubelet[1962]: W0715 11:31:01.425407 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.425505 kubelet[1962]: E0715 11:31:01.425489 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.426264 kubelet[1962]: E0715 11:31:01.426254 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.426337 kubelet[1962]: W0715 11:31:01.426323 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.426417 kubelet[1962]: E0715 11:31:01.426402 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.426661 kubelet[1962]: E0715 11:31:01.426651 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.426745 kubelet[1962]: W0715 11:31:01.426730 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.426818 kubelet[1962]: E0715 11:31:01.426802 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.427051 kubelet[1962]: E0715 11:31:01.427040 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.427123 kubelet[1962]: W0715 11:31:01.427108 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.427205 kubelet[1962]: E0715 11:31:01.427188 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.427426 kubelet[1962]: E0715 11:31:01.427416 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.427594 kubelet[1962]: W0715 11:31:01.427582 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.427666 kubelet[1962]: E0715 11:31:01.427652 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.427971 kubelet[1962]: E0715 11:31:01.427960 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.428048 kubelet[1962]: W0715 11:31:01.428033 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.428125 kubelet[1962]: E0715 11:31:01.428109 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.428355 kubelet[1962]: E0715 11:31:01.428345 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.428571 kubelet[1962]: W0715 11:31:01.428558 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.428643 kubelet[1962]: E0715 11:31:01.428629 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.429157 kubelet[1962]: E0715 11:31:01.429147 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.429245 kubelet[1962]: W0715 11:31:01.429230 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.429321 kubelet[1962]: E0715 11:31:01.429307 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.429573 kubelet[1962]: E0715 11:31:01.429563 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.429652 kubelet[1962]: W0715 11:31:01.429637 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.429751 kubelet[1962]: E0715 11:31:01.429737 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.430019 kubelet[1962]: E0715 11:31:01.430009 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.430096 kubelet[1962]: W0715 11:31:01.430081 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.430173 kubelet[1962]: E0715 11:31:01.430158 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.436498 kubelet[1962]: E0715 11:31:01.436460 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:01.436662 kubelet[1962]: W0715 11:31:01.436645 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:01.436775 kubelet[1962]: E0715 11:31:01.436759 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:01.896000 audit[2627]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2627 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:01.900645 kernel: kauditd_printk_skb: 133 callbacks suppressed Jul 15 11:31:01.900718 kernel: audit: type=1325 audit(1752579061.896:982): table=filter:97 family=2 entries=20 op=nft_register_rule pid=2627 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:01.900745 kernel: audit: type=1300 audit(1752579061.896:982): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff1ac947d0 a2=0 a3=7fff1ac947bc items=0 ppid=2149 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.896000 audit[2627]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff1ac947d0 a2=0 a3=7fff1ac947bc items=0 ppid=2149 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.905010 kernel: audit: type=1327 audit(1752579061.896:982): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:01.896000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:01.910000 audit[2627]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2627 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:01.910000 audit[2627]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff1ac947d0 a2=0 a3=0 items=0 ppid=2149 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.917649 kernel: audit: type=1325 audit(1752579061.910:983): table=nat:98 family=2 entries=12 op=nft_register_rule pid=2627 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:01.917817 kernel: audit: type=1300 audit(1752579061.910:983): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff1ac947d0 a2=0 a3=0 items=0 ppid=2149 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:01.917841 kernel: audit: type=1327 audit(1752579061.910:983): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:01.910000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:02.985297 kubelet[1962]: E0715 11:31:02.985248 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnmdh" podUID="b2372bb1-56e8-428a-9553-632abd324bfd" Jul 15 11:31:03.560585 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2934846781.mount: Deactivated successfully. Jul 15 11:31:04.985100 kubelet[1962]: E0715 11:31:04.985040 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnmdh" podUID="b2372bb1-56e8-428a-9553-632abd324bfd" Jul 15 11:31:05.369289 env[1206]: time="2025-07-15T11:31:05.369169865Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:05.371123 env[1206]: time="2025-07-15T11:31:05.371082394Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:05.372785 env[1206]: time="2025-07-15T11:31:05.372741515Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:05.374069 env[1206]: time="2025-07-15T11:31:05.374045308Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:05.374487 env[1206]: time="2025-07-15T11:31:05.374462673Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 15 11:31:05.375455 env[1206]: time="2025-07-15T11:31:05.375417850Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:31:05.383344 env[1206]: time="2025-07-15T11:31:05.383306993Z" level=info msg="CreateContainer within sandbox \"ca9461d01d7523d6496d0e9ad45f48fa0ce4d615632e48d45ec67293d4240d58\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:31:05.396483 env[1206]: time="2025-07-15T11:31:05.396423851Z" level=info msg="CreateContainer within sandbox \"ca9461d01d7523d6496d0e9ad45f48fa0ce4d615632e48d45ec67293d4240d58\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"963ac8739a12f22a04213bf92251178700a54a0e4673b7b802b4a122081b0add\"" Jul 15 11:31:05.396974 env[1206]: time="2025-07-15T11:31:05.396934723Z" level=info msg="StartContainer for \"963ac8739a12f22a04213bf92251178700a54a0e4673b7b802b4a122081b0add\"" Jul 15 11:31:05.410966 systemd[1]: Started cri-containerd-963ac8739a12f22a04213bf92251178700a54a0e4673b7b802b4a122081b0add.scope. Jul 15 11:31:05.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.427070 kernel: audit: type=1400 audit(1752579065.420:984): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.427138 kernel: audit: type=1400 audit(1752579065.420:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.427157 kernel: audit: type=1400 audit(1752579065.420:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.429815 kernel: audit: type=1400 audit(1752579065.420:987): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit: BPF prog-id=127 op=LOAD Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2490 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:05.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936336163383733396131326632326130343231336266393232353131 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2490 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:05.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936336163383733396131326632326130343231336266393232353131 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.423000 audit: BPF prog-id=128 op=LOAD Jul 15 11:31:05.423000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00033c530 items=0 ppid=2490 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:05.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936336163383733396131326632326130343231336266393232353131 Jul 15 11:31:05.426000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.426000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.426000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.426000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.426000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.426000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.426000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.426000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.426000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.426000 audit: BPF prog-id=129 op=LOAD Jul 15 11:31:05.426000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00033c578 items=0 ppid=2490 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:05.426000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936336163383733396131326632326130343231336266393232353131 Jul 15 11:31:05.431000 audit: BPF prog-id=129 op=UNLOAD Jul 15 11:31:05.431000 audit: BPF prog-id=128 op=UNLOAD Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:05.431000 audit: BPF prog-id=130 op=LOAD Jul 15 11:31:05.431000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00033c988 items=0 ppid=2490 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:05.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936336163383733396131326632326130343231336266393232353131 Jul 15 11:31:05.514872 env[1206]: time="2025-07-15T11:31:05.514812789Z" level=info msg="StartContainer for \"963ac8739a12f22a04213bf92251178700a54a0e4673b7b802b4a122081b0add\" returns successfully" Jul 15 11:31:06.080258 kubelet[1962]: E0715 11:31:06.080174 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:06.141749 kubelet[1962]: E0715 11:31:06.141710 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.141749 kubelet[1962]: W0715 11:31:06.141731 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.141749 kubelet[1962]: E0715 11:31:06.141747 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.141985 kubelet[1962]: E0715 11:31:06.141931 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.141985 kubelet[1962]: W0715 11:31:06.141937 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.141985 kubelet[1962]: E0715 11:31:06.141944 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.142122 kubelet[1962]: E0715 11:31:06.142100 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.142122 kubelet[1962]: W0715 11:31:06.142110 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.142122 kubelet[1962]: E0715 11:31:06.142118 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.142362 kubelet[1962]: E0715 11:31:06.142329 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.142362 kubelet[1962]: W0715 11:31:06.142339 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.142362 kubelet[1962]: E0715 11:31:06.142360 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.142506 kubelet[1962]: E0715 11:31:06.142493 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.142506 kubelet[1962]: W0715 11:31:06.142501 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.142574 kubelet[1962]: E0715 11:31:06.142508 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.142662 kubelet[1962]: E0715 11:31:06.142649 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.142662 kubelet[1962]: W0715 11:31:06.142657 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.142662 kubelet[1962]: E0715 11:31:06.142664 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.142839 kubelet[1962]: E0715 11:31:06.142824 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.142839 kubelet[1962]: W0715 11:31:06.142833 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.142839 kubelet[1962]: E0715 11:31:06.142839 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.142977 kubelet[1962]: E0715 11:31:06.142972 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.142977 kubelet[1962]: W0715 11:31:06.142977 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.143052 kubelet[1962]: E0715 11:31:06.142984 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.143150 kubelet[1962]: E0715 11:31:06.143136 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.143150 kubelet[1962]: W0715 11:31:06.143144 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.143150 kubelet[1962]: E0715 11:31:06.143150 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.143308 kubelet[1962]: E0715 11:31:06.143292 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.143308 kubelet[1962]: W0715 11:31:06.143303 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.143391 kubelet[1962]: E0715 11:31:06.143311 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.143471 kubelet[1962]: E0715 11:31:06.143456 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.143471 kubelet[1962]: W0715 11:31:06.143465 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.143471 kubelet[1962]: E0715 11:31:06.143471 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.143640 kubelet[1962]: E0715 11:31:06.143626 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.143640 kubelet[1962]: W0715 11:31:06.143635 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.143716 kubelet[1962]: E0715 11:31:06.143642 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.143807 kubelet[1962]: E0715 11:31:06.143794 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.143807 kubelet[1962]: W0715 11:31:06.143802 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.143868 kubelet[1962]: E0715 11:31:06.143809 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.143966 kubelet[1962]: E0715 11:31:06.143953 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.143966 kubelet[1962]: W0715 11:31:06.143961 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.143966 kubelet[1962]: E0715 11:31:06.143967 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.144095 kubelet[1962]: E0715 11:31:06.144083 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.144095 kubelet[1962]: W0715 11:31:06.144091 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.144155 kubelet[1962]: E0715 11:31:06.144097 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.158510 kubelet[1962]: E0715 11:31:06.158482 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.158510 kubelet[1962]: W0715 11:31:06.158502 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.158603 kubelet[1962]: E0715 11:31:06.158519 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.158732 kubelet[1962]: E0715 11:31:06.158722 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.158732 kubelet[1962]: W0715 11:31:06.158730 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.158819 kubelet[1962]: E0715 11:31:06.158739 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.158931 kubelet[1962]: E0715 11:31:06.158916 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.158931 kubelet[1962]: W0715 11:31:06.158928 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.159005 kubelet[1962]: E0715 11:31:06.158938 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.159151 kubelet[1962]: E0715 11:31:06.159135 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.159151 kubelet[1962]: W0715 11:31:06.159146 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.159151 kubelet[1962]: E0715 11:31:06.159154 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.159342 kubelet[1962]: E0715 11:31:06.159320 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.159342 kubelet[1962]: W0715 11:31:06.159329 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.159342 kubelet[1962]: E0715 11:31:06.159336 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.159500 kubelet[1962]: E0715 11:31:06.159487 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.159500 kubelet[1962]: W0715 11:31:06.159496 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.159565 kubelet[1962]: E0715 11:31:06.159502 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.159690 kubelet[1962]: E0715 11:31:06.159666 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.159690 kubelet[1962]: W0715 11:31:06.159688 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.159737 kubelet[1962]: E0715 11:31:06.159696 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.159959 kubelet[1962]: E0715 11:31:06.159944 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.159959 kubelet[1962]: W0715 11:31:06.159956 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.160036 kubelet[1962]: E0715 11:31:06.159965 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.160134 kubelet[1962]: E0715 11:31:06.160118 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.160134 kubelet[1962]: W0715 11:31:06.160128 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.160222 kubelet[1962]: E0715 11:31:06.160139 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.160308 kubelet[1962]: E0715 11:31:06.160292 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.160308 kubelet[1962]: W0715 11:31:06.160302 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.160415 kubelet[1962]: E0715 11:31:06.160311 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.160482 kubelet[1962]: E0715 11:31:06.160471 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.160482 kubelet[1962]: W0715 11:31:06.160480 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.160554 kubelet[1962]: E0715 11:31:06.160488 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.160659 kubelet[1962]: E0715 11:31:06.160646 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.160659 kubelet[1962]: W0715 11:31:06.160655 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.160796 kubelet[1962]: E0715 11:31:06.160663 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.160927 kubelet[1962]: E0715 11:31:06.160912 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.160927 kubelet[1962]: W0715 11:31:06.160924 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.161002 kubelet[1962]: E0715 11:31:06.160933 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.161192 kubelet[1962]: E0715 11:31:06.161174 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.161192 kubelet[1962]: W0715 11:31:06.161188 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.161278 kubelet[1962]: E0715 11:31:06.161198 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.161371 kubelet[1962]: E0715 11:31:06.161358 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.161371 kubelet[1962]: W0715 11:31:06.161368 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.161423 kubelet[1962]: E0715 11:31:06.161378 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.161574 kubelet[1962]: E0715 11:31:06.161560 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.161574 kubelet[1962]: W0715 11:31:06.161569 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.161723 kubelet[1962]: E0715 11:31:06.161578 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.161845 kubelet[1962]: E0715 11:31:06.161831 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.161845 kubelet[1962]: W0715 11:31:06.161842 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.161894 kubelet[1962]: E0715 11:31:06.161850 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.162033 kubelet[1962]: E0715 11:31:06.162022 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:06.162033 kubelet[1962]: W0715 11:31:06.162031 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:06.162086 kubelet[1962]: E0715 11:31:06.162039 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:06.257246 kubelet[1962]: I0715 11:31:06.257164 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6676df8558-d276h" podStartSLOduration=2.237056113 podStartE2EDuration="6.257149639s" podCreationTimestamp="2025-07-15 11:31:00 +0000 UTC" firstStartedPulling="2025-07-15 11:31:01.355117405 +0000 UTC m=+21.466364854" lastFinishedPulling="2025-07-15 11:31:05.375210941 +0000 UTC m=+25.486458380" observedRunningTime="2025-07-15 11:31:06.256667623 +0000 UTC m=+26.367915102" watchObservedRunningTime="2025-07-15 11:31:06.257149639 +0000 UTC m=+26.368397078" Jul 15 11:31:06.985142 kubelet[1962]: E0715 11:31:06.985076 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnmdh" podUID="b2372bb1-56e8-428a-9553-632abd324bfd" Jul 15 11:31:07.049996 kubelet[1962]: I0715 11:31:07.049965 1962 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:31:07.050315 kubelet[1962]: E0715 11:31:07.050292 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:07.070740 kubelet[1962]: E0715 11:31:07.070711 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.070740 kubelet[1962]: W0715 11:31:07.070731 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.070972 kubelet[1962]: E0715 11:31:07.070753 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.070972 kubelet[1962]: E0715 11:31:07.070911 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.070972 kubelet[1962]: W0715 11:31:07.070920 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.070972 kubelet[1962]: E0715 11:31:07.070928 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.071112 kubelet[1962]: E0715 11:31:07.071073 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.071112 kubelet[1962]: W0715 11:31:07.071104 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.071196 kubelet[1962]: E0715 11:31:07.071113 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.071408 kubelet[1962]: E0715 11:31:07.071397 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.071464 kubelet[1962]: W0715 11:31:07.071411 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.071464 kubelet[1962]: E0715 11:31:07.071426 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.071792 kubelet[1962]: E0715 11:31:07.071763 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.071792 kubelet[1962]: W0715 11:31:07.071779 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.071860 kubelet[1962]: E0715 11:31:07.071795 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.071957 kubelet[1962]: E0715 11:31:07.071942 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.071957 kubelet[1962]: W0715 11:31:07.071950 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.071957 kubelet[1962]: E0715 11:31:07.071957 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.072096 kubelet[1962]: E0715 11:31:07.072082 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.072096 kubelet[1962]: W0715 11:31:07.072090 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.072096 kubelet[1962]: E0715 11:31:07.072097 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.072236 kubelet[1962]: E0715 11:31:07.072223 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.072236 kubelet[1962]: W0715 11:31:07.072233 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.072304 kubelet[1962]: E0715 11:31:07.072240 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.072403 kubelet[1962]: E0715 11:31:07.072390 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.072403 kubelet[1962]: W0715 11:31:07.072399 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.072403 kubelet[1962]: E0715 11:31:07.072405 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.072546 kubelet[1962]: E0715 11:31:07.072533 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.072546 kubelet[1962]: W0715 11:31:07.072541 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.072546 kubelet[1962]: E0715 11:31:07.072548 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.072697 kubelet[1962]: E0715 11:31:07.072668 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.072697 kubelet[1962]: W0715 11:31:07.072687 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.072697 kubelet[1962]: E0715 11:31:07.072694 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.072831 kubelet[1962]: E0715 11:31:07.072818 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.072831 kubelet[1962]: W0715 11:31:07.072827 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.072831 kubelet[1962]: E0715 11:31:07.072833 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.072976 kubelet[1962]: E0715 11:31:07.072964 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.072976 kubelet[1962]: W0715 11:31:07.072974 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.073044 kubelet[1962]: E0715 11:31:07.072981 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.073122 kubelet[1962]: E0715 11:31:07.073109 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.073122 kubelet[1962]: W0715 11:31:07.073118 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.073182 kubelet[1962]: E0715 11:31:07.073124 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.073260 kubelet[1962]: E0715 11:31:07.073247 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.073260 kubelet[1962]: W0715 11:31:07.073256 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.073319 kubelet[1962]: E0715 11:31:07.073262 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.171797 kubelet[1962]: E0715 11:31:07.171767 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.171797 kubelet[1962]: W0715 11:31:07.171787 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.171797 kubelet[1962]: E0715 11:31:07.171805 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.172209 kubelet[1962]: E0715 11:31:07.171982 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.172209 kubelet[1962]: W0715 11:31:07.171989 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.172209 kubelet[1962]: E0715 11:31:07.171997 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.172209 kubelet[1962]: E0715 11:31:07.172150 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.172209 kubelet[1962]: W0715 11:31:07.172158 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.172209 kubelet[1962]: E0715 11:31:07.172166 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.172370 kubelet[1962]: E0715 11:31:07.172297 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.172370 kubelet[1962]: W0715 11:31:07.172305 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.172370 kubelet[1962]: E0715 11:31:07.172314 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.172461 kubelet[1962]: E0715 11:31:07.172442 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.172461 kubelet[1962]: W0715 11:31:07.172450 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.172461 kubelet[1962]: E0715 11:31:07.172457 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.172670 kubelet[1962]: E0715 11:31:07.172618 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.172670 kubelet[1962]: W0715 11:31:07.172624 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.172670 kubelet[1962]: E0715 11:31:07.172631 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.173004 kubelet[1962]: E0715 11:31:07.172990 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.173004 kubelet[1962]: W0715 11:31:07.173002 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.173078 kubelet[1962]: E0715 11:31:07.173012 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.173175 kubelet[1962]: E0715 11:31:07.173163 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.173175 kubelet[1962]: W0715 11:31:07.173174 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.173222 kubelet[1962]: E0715 11:31:07.173182 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.173303 kubelet[1962]: E0715 11:31:07.173291 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.173303 kubelet[1962]: W0715 11:31:07.173299 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.173382 kubelet[1962]: E0715 11:31:07.173306 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.173464 kubelet[1962]: E0715 11:31:07.173451 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.173464 kubelet[1962]: W0715 11:31:07.173460 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.173543 kubelet[1962]: E0715 11:31:07.173470 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.173621 kubelet[1962]: E0715 11:31:07.173609 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.173621 kubelet[1962]: W0715 11:31:07.173619 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.173704 kubelet[1962]: E0715 11:31:07.173628 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.173940 kubelet[1962]: E0715 11:31:07.173918 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.173940 kubelet[1962]: W0715 11:31:07.173937 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.174011 kubelet[1962]: E0715 11:31:07.173955 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.174159 kubelet[1962]: E0715 11:31:07.174146 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.174159 kubelet[1962]: W0715 11:31:07.174155 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.174209 kubelet[1962]: E0715 11:31:07.174162 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.174316 kubelet[1962]: E0715 11:31:07.174303 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.174316 kubelet[1962]: W0715 11:31:07.174312 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.174316 kubelet[1962]: E0715 11:31:07.174318 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.174480 kubelet[1962]: E0715 11:31:07.174468 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.174507 kubelet[1962]: W0715 11:31:07.174480 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.174507 kubelet[1962]: E0715 11:31:07.174488 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.174697 kubelet[1962]: E0715 11:31:07.174658 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.174697 kubelet[1962]: W0715 11:31:07.174690 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.174792 kubelet[1962]: E0715 11:31:07.174701 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.174928 kubelet[1962]: E0715 11:31:07.174915 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.174928 kubelet[1962]: W0715 11:31:07.174925 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.174993 kubelet[1962]: E0715 11:31:07.174933 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.175121 kubelet[1962]: E0715 11:31:07.175105 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:07.175121 kubelet[1962]: W0715 11:31:07.175116 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:07.175207 kubelet[1962]: E0715 11:31:07.175128 1962 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:07.608441 env[1206]: time="2025-07-15T11:31:07.608386692Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:07.610749 env[1206]: time="2025-07-15T11:31:07.610717816Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:07.612330 env[1206]: time="2025-07-15T11:31:07.612281496Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:07.613579 env[1206]: time="2025-07-15T11:31:07.613537689Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:07.613987 env[1206]: time="2025-07-15T11:31:07.613950996Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 15 11:31:07.618121 env[1206]: time="2025-07-15T11:31:07.618079349Z" level=info msg="CreateContainer within sandbox \"d0c6a5d40ccc371a60941ff3e7657850646f037f8b6c735347c527294a8499a5\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:31:07.632072 env[1206]: time="2025-07-15T11:31:07.632035125Z" level=info msg="CreateContainer within sandbox \"d0c6a5d40ccc371a60941ff3e7657850646f037f8b6c735347c527294a8499a5\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"d47d2a1ae1d67ba4e18045444f10ad44a3c3a6cc5887e6e7d45dde5e28b1f1bf\"" Jul 15 11:31:07.632384 env[1206]: time="2025-07-15T11:31:07.632364014Z" level=info msg="StartContainer for \"d47d2a1ae1d67ba4e18045444f10ad44a3c3a6cc5887e6e7d45dde5e28b1f1bf\"" Jul 15 11:31:07.647731 systemd[1]: run-containerd-runc-k8s.io-d47d2a1ae1d67ba4e18045444f10ad44a3c3a6cc5887e6e7d45dde5e28b1f1bf-runc.mCmpU0.mount: Deactivated successfully. Jul 15 11:31:07.649111 systemd[1]: Started cri-containerd-d47d2a1ae1d67ba4e18045444f10ad44a3c3a6cc5887e6e7d45dde5e28b1f1bf.scope. Jul 15 11:31:07.663370 kernel: kauditd_printk_skb: 53 callbacks suppressed Jul 15 11:31:07.663452 kernel: audit: type=1400 audit(1752579067.659:1002): avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.668190 kernel: audit: type=1300 audit(1752579067.659:1002): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fd0643f9768 items=0 ppid=2567 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:07.668237 kernel: audit: type=1327 audit(1752579067.659:1002): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434376432613161653164363762613465313830343534343466313061 Jul 15 11:31:07.659000 audit[2744]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fd0643f9768 items=0 ppid=2567 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:07.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434376432613161653164363762613465313830343534343466313061 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.674583 kernel: audit: type=1400 audit(1752579067.659:1003): avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.677380 kernel: audit: type=1400 audit(1752579067.659:1003): avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.680309 kernel: audit: type=1400 audit(1752579067.659:1003): avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.680349 kernel: audit: type=1400 audit(1752579067.659:1003): avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.684098 kernel: audit: type=1400 audit(1752579067.659:1003): avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.687915 kernel: audit: type=1400 audit(1752579067.659:1003): avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.688010 env[1206]: time="2025-07-15T11:31:07.687916026Z" level=info msg="StartContainer for \"d47d2a1ae1d67ba4e18045444f10ad44a3c3a6cc5887e6e7d45dde5e28b1f1bf\" returns successfully" Jul 15 11:31:07.692553 kernel: audit: type=1400 audit(1752579067.659:1003): avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.659000 audit: BPF prog-id=131 op=LOAD Jul 15 11:31:07.659000 audit[2744]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c00035fea8 items=0 ppid=2567 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:07.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434376432613161653164363762613465313830343534343466313061 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit: BPF prog-id=132 op=LOAD Jul 15 11:31:07.662000 audit[2744]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c00035fef8 items=0 ppid=2567 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:07.662000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434376432613161653164363762613465313830343534343466313061 Jul 15 11:31:07.662000 audit: BPF prog-id=132 op=UNLOAD Jul 15 11:31:07.662000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:07.662000 audit: BPF prog-id=133 op=LOAD Jul 15 11:31:07.662000 audit[2744]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c00035ff88 items=0 ppid=2567 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:07.662000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434376432613161653164363762613465313830343534343466313061 Jul 15 11:31:07.695142 systemd[1]: cri-containerd-d47d2a1ae1d67ba4e18045444f10ad44a3c3a6cc5887e6e7d45dde5e28b1f1bf.scope: Deactivated successfully. Jul 15 11:31:07.698000 audit: BPF prog-id=133 op=UNLOAD Jul 15 11:31:08.000437 env[1206]: time="2025-07-15T11:31:08.000373572Z" level=info msg="shim disconnected" id=d47d2a1ae1d67ba4e18045444f10ad44a3c3a6cc5887e6e7d45dde5e28b1f1bf Jul 15 11:31:08.000437 env[1206]: time="2025-07-15T11:31:08.000433105Z" level=warning msg="cleaning up after shim disconnected" id=d47d2a1ae1d67ba4e18045444f10ad44a3c3a6cc5887e6e7d45dde5e28b1f1bf namespace=k8s.io Jul 15 11:31:08.000706 env[1206]: time="2025-07-15T11:31:08.000447171Z" level=info msg="cleaning up dead shim" Jul 15 11:31:08.007486 env[1206]: time="2025-07-15T11:31:08.007427306Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:31:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2782 runtime=io.containerd.runc.v2\n" Jul 15 11:31:08.053653 env[1206]: time="2025-07-15T11:31:08.053610012Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:31:08.628390 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d47d2a1ae1d67ba4e18045444f10ad44a3c3a6cc5887e6e7d45dde5e28b1f1bf-rootfs.mount: Deactivated successfully. Jul 15 11:31:08.985145 kubelet[1962]: E0715 11:31:08.985053 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnmdh" podUID="b2372bb1-56e8-428a-9553-632abd324bfd" Jul 15 11:31:10.986038 kubelet[1962]: E0715 11:31:10.985999 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnmdh" podUID="b2372bb1-56e8-428a-9553-632abd324bfd" Jul 15 11:31:11.775551 env[1206]: time="2025-07-15T11:31:11.775490683Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:11.777277 env[1206]: time="2025-07-15T11:31:11.777214533Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:11.778641 env[1206]: time="2025-07-15T11:31:11.778597893Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:11.780234 env[1206]: time="2025-07-15T11:31:11.780184835Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:11.780711 env[1206]: time="2025-07-15T11:31:11.780670719Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 15 11:31:11.785181 env[1206]: time="2025-07-15T11:31:11.785135159Z" level=info msg="CreateContainer within sandbox \"d0c6a5d40ccc371a60941ff3e7657850646f037f8b6c735347c527294a8499a5\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:31:11.803768 env[1206]: time="2025-07-15T11:31:11.803713574Z" level=info msg="CreateContainer within sandbox \"d0c6a5d40ccc371a60941ff3e7657850646f037f8b6c735347c527294a8499a5\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"329769d95c63be0f586530371eaa30fe985f967473bda302ab0dba8b85aa1fb0\"" Jul 15 11:31:11.804315 env[1206]: time="2025-07-15T11:31:11.804272905Z" level=info msg="StartContainer for \"329769d95c63be0f586530371eaa30fe985f967473bda302ab0dba8b85aa1fb0\"" Jul 15 11:31:11.820379 systemd[1]: Started cri-containerd-329769d95c63be0f586530371eaa30fe985f967473bda302ab0dba8b85aa1fb0.scope. Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f18802b5cc8 items=0 ppid=2567 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:11.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332393736396439356336336265306635383635333033373165616133 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit: BPF prog-id=134 op=LOAD Jul 15 11:31:11.884000 audit[2808]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003045d8 items=0 ppid=2567 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:11.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332393736396439356336336265306635383635333033373165616133 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit: BPF prog-id=135 op=LOAD Jul 15 11:31:11.884000 audit[2808]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000304628 items=0 ppid=2567 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:11.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332393736396439356336336265306635383635333033373165616133 Jul 15 11:31:11.884000 audit: BPF prog-id=135 op=UNLOAD Jul 15 11:31:11.884000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { perfmon } for pid=2808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit[2808]: AVC avc: denied { bpf } for pid=2808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:11.884000 audit: BPF prog-id=136 op=LOAD Jul 15 11:31:11.884000 audit[2808]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003046b8 items=0 ppid=2567 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:11.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332393736396439356336336265306635383635333033373165616133 Jul 15 11:31:12.173829 env[1206]: time="2025-07-15T11:31:12.173609670Z" level=info msg="StartContainer for \"329769d95c63be0f586530371eaa30fe985f967473bda302ab0dba8b85aa1fb0\" returns successfully" Jul 15 11:31:13.086625 kubelet[1962]: E0715 11:31:13.086511 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnmdh" podUID="b2372bb1-56e8-428a-9553-632abd324bfd" Jul 15 11:31:13.256197 env[1206]: time="2025-07-15T11:31:13.256052666Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:31:13.258258 systemd[1]: cri-containerd-329769d95c63be0f586530371eaa30fe985f967473bda302ab0dba8b85aa1fb0.scope: Deactivated successfully. Jul 15 11:31:13.266556 kernel: kauditd_printk_skb: 77 callbacks suppressed Jul 15 11:31:13.266697 kernel: audit: type=1334 audit(1752579073.264:1015): prog-id=136 op=UNLOAD Jul 15 11:31:13.264000 audit: BPF prog-id=136 op=UNLOAD Jul 15 11:31:13.275764 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-329769d95c63be0f586530371eaa30fe985f967473bda302ab0dba8b85aa1fb0-rootfs.mount: Deactivated successfully. Jul 15 11:31:13.279088 env[1206]: time="2025-07-15T11:31:13.279039154Z" level=info msg="shim disconnected" id=329769d95c63be0f586530371eaa30fe985f967473bda302ab0dba8b85aa1fb0 Jul 15 11:31:13.279222 env[1206]: time="2025-07-15T11:31:13.279092183Z" level=warning msg="cleaning up after shim disconnected" id=329769d95c63be0f586530371eaa30fe985f967473bda302ab0dba8b85aa1fb0 namespace=k8s.io Jul 15 11:31:13.279222 env[1206]: time="2025-07-15T11:31:13.279104356Z" level=info msg="cleaning up dead shim" Jul 15 11:31:13.284716 env[1206]: time="2025-07-15T11:31:13.284670173Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:31:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2849 runtime=io.containerd.runc.v2\n" Jul 15 11:31:13.300259 kubelet[1962]: I0715 11:31:13.300234 1962 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 15 11:31:13.333044 systemd[1]: Created slice kubepods-besteffort-pod2bb8a107_93a8_4665_8e4a_6f408ffa9fa9.slice. Jul 15 11:31:13.337991 systemd[1]: Created slice kubepods-burstable-pod71dab566_ad70_43d5_83cf_f9e5d62752a1.slice. Jul 15 11:31:13.343322 systemd[1]: Created slice kubepods-burstable-pod2be4eb60_c25a_4ddc_93c8_6f8d8f50f0b6.slice. Jul 15 11:31:13.347004 systemd[1]: Created slice kubepods-besteffort-podadce578c_d5dc_4d8e_aaf3_a574713b1977.slice. Jul 15 11:31:13.353399 systemd[1]: Created slice kubepods-besteffort-pod1c2b5616_5ace_4ead_8736_0b037583204d.slice. Jul 15 11:31:13.362271 systemd[1]: Created slice kubepods-besteffort-pod5bc46ac2_129e_430f_97e3_3a35e48aec97.slice. Jul 15 11:31:13.366106 systemd[1]: Created slice kubepods-besteffort-podd07f2c58_b78d_4a49_8177_494f02e5ce78.slice. Jul 15 11:31:13.414471 kubelet[1962]: I0715 11:31:13.414431 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6-config-volume\") pod \"coredns-674b8bbfcf-k9t6m\" (UID: \"2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6\") " pod="kube-system/coredns-674b8bbfcf-k9t6m" Jul 15 11:31:13.414471 kubelet[1962]: I0715 11:31:13.414467 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5bn8r\" (UniqueName: \"kubernetes.io/projected/1c2b5616-5ace-4ead-8736-0b037583204d-kube-api-access-5bn8r\") pod \"calico-apiserver-f9f8586f4-wxd59\" (UID: \"1c2b5616-5ace-4ead-8736-0b037583204d\") " pod="calico-apiserver/calico-apiserver-f9f8586f4-wxd59" Jul 15 11:31:13.414471 kubelet[1962]: I0715 11:31:13.414488 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-55mqz\" (UniqueName: \"kubernetes.io/projected/5bc46ac2-129e-430f-97e3-3a35e48aec97-kube-api-access-55mqz\") pod \"goldmane-768f4c5c69-fss4l\" (UID: \"5bc46ac2-129e-430f-97e3-3a35e48aec97\") " pod="calico-system/goldmane-768f4c5c69-fss4l" Jul 15 11:31:13.414706 kubelet[1962]: I0715 11:31:13.414504 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/71dab566-ad70-43d5-83cf-f9e5d62752a1-config-volume\") pod \"coredns-674b8bbfcf-v8rh7\" (UID: \"71dab566-ad70-43d5-83cf-f9e5d62752a1\") " pod="kube-system/coredns-674b8bbfcf-v8rh7" Jul 15 11:31:13.414706 kubelet[1962]: I0715 11:31:13.414519 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x2tkl\" (UniqueName: \"kubernetes.io/projected/adce578c-d5dc-4d8e-aaf3-a574713b1977-kube-api-access-x2tkl\") pod \"calico-kube-controllers-5f5fb48689-4zmxm\" (UID: \"adce578c-d5dc-4d8e-aaf3-a574713b1977\") " pod="calico-system/calico-kube-controllers-5f5fb48689-4zmxm" Jul 15 11:31:13.414706 kubelet[1962]: I0715 11:31:13.414536 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/5bc46ac2-129e-430f-97e3-3a35e48aec97-config\") pod \"goldmane-768f4c5c69-fss4l\" (UID: \"5bc46ac2-129e-430f-97e3-3a35e48aec97\") " pod="calico-system/goldmane-768f4c5c69-fss4l" Jul 15 11:31:13.414706 kubelet[1962]: I0715 11:31:13.414551 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5bc46ac2-129e-430f-97e3-3a35e48aec97-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-fss4l\" (UID: \"5bc46ac2-129e-430f-97e3-3a35e48aec97\") " pod="calico-system/goldmane-768f4c5c69-fss4l" Jul 15 11:31:13.414706 kubelet[1962]: I0715 11:31:13.414563 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/5bc46ac2-129e-430f-97e3-3a35e48aec97-goldmane-key-pair\") pod \"goldmane-768f4c5c69-fss4l\" (UID: \"5bc46ac2-129e-430f-97e3-3a35e48aec97\") " pod="calico-system/goldmane-768f4c5c69-fss4l" Jul 15 11:31:13.414849 kubelet[1962]: I0715 11:31:13.414580 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-whisker-ca-bundle\") pod \"whisker-6456cf68ff-f76xh\" (UID: \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\") " pod="calico-system/whisker-6456cf68ff-f76xh" Jul 15 11:31:13.414849 kubelet[1962]: I0715 11:31:13.414592 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dd6nw\" (UniqueName: \"kubernetes.io/projected/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-kube-api-access-dd6nw\") pod \"whisker-6456cf68ff-f76xh\" (UID: \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\") " pod="calico-system/whisker-6456cf68ff-f76xh" Jul 15 11:31:13.414849 kubelet[1962]: I0715 11:31:13.414655 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-whisker-backend-key-pair\") pod \"whisker-6456cf68ff-f76xh\" (UID: \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\") " pod="calico-system/whisker-6456cf68ff-f76xh" Jul 15 11:31:13.414849 kubelet[1962]: I0715 11:31:13.414719 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qqp9q\" (UniqueName: \"kubernetes.io/projected/71dab566-ad70-43d5-83cf-f9e5d62752a1-kube-api-access-qqp9q\") pod \"coredns-674b8bbfcf-v8rh7\" (UID: \"71dab566-ad70-43d5-83cf-f9e5d62752a1\") " pod="kube-system/coredns-674b8bbfcf-v8rh7" Jul 15 11:31:13.414849 kubelet[1962]: I0715 11:31:13.414746 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/adce578c-d5dc-4d8e-aaf3-a574713b1977-tigera-ca-bundle\") pod \"calico-kube-controllers-5f5fb48689-4zmxm\" (UID: \"adce578c-d5dc-4d8e-aaf3-a574713b1977\") " pod="calico-system/calico-kube-controllers-5f5fb48689-4zmxm" Jul 15 11:31:13.414969 kubelet[1962]: I0715 11:31:13.414779 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1c2b5616-5ace-4ead-8736-0b037583204d-calico-apiserver-certs\") pod \"calico-apiserver-f9f8586f4-wxd59\" (UID: \"1c2b5616-5ace-4ead-8736-0b037583204d\") " pod="calico-apiserver/calico-apiserver-f9f8586f4-wxd59" Jul 15 11:31:13.414969 kubelet[1962]: I0715 11:31:13.414795 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d07f2c58-b78d-4a49-8177-494f02e5ce78-calico-apiserver-certs\") pod \"calico-apiserver-f9f8586f4-vwl5f\" (UID: \"d07f2c58-b78d-4a49-8177-494f02e5ce78\") " pod="calico-apiserver/calico-apiserver-f9f8586f4-vwl5f" Jul 15 11:31:13.414969 kubelet[1962]: I0715 11:31:13.414813 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jrrx5\" (UniqueName: \"kubernetes.io/projected/d07f2c58-b78d-4a49-8177-494f02e5ce78-kube-api-access-jrrx5\") pod \"calico-apiserver-f9f8586f4-vwl5f\" (UID: \"d07f2c58-b78d-4a49-8177-494f02e5ce78\") " pod="calico-apiserver/calico-apiserver-f9f8586f4-vwl5f" Jul 15 11:31:13.414969 kubelet[1962]: I0715 11:31:13.414828 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zvz8j\" (UniqueName: \"kubernetes.io/projected/2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6-kube-api-access-zvz8j\") pod \"coredns-674b8bbfcf-k9t6m\" (UID: \"2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6\") " pod="kube-system/coredns-674b8bbfcf-k9t6m" Jul 15 11:31:13.637509 env[1206]: time="2025-07-15T11:31:13.637463828Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6456cf68ff-f76xh,Uid:2bb8a107-93a8-4665-8e4a-6f408ffa9fa9,Namespace:calico-system,Attempt:0,}" Jul 15 11:31:13.642333 kubelet[1962]: E0715 11:31:13.642297 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:13.642743 env[1206]: time="2025-07-15T11:31:13.642695328Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-v8rh7,Uid:71dab566-ad70-43d5-83cf-f9e5d62752a1,Namespace:kube-system,Attempt:0,}" Jul 15 11:31:13.645918 kubelet[1962]: E0715 11:31:13.645890 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:13.646435 env[1206]: time="2025-07-15T11:31:13.646385041Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-k9t6m,Uid:2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6,Namespace:kube-system,Attempt:0,}" Jul 15 11:31:13.650389 env[1206]: time="2025-07-15T11:31:13.650361802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f5fb48689-4zmxm,Uid:adce578c-d5dc-4d8e-aaf3-a574713b1977,Namespace:calico-system,Attempt:0,}" Jul 15 11:31:13.663448 env[1206]: time="2025-07-15T11:31:13.663401551Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f9f8586f4-wxd59,Uid:1c2b5616-5ace-4ead-8736-0b037583204d,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:31:13.665254 env[1206]: time="2025-07-15T11:31:13.665220098Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-fss4l,Uid:5bc46ac2-129e-430f-97e3-3a35e48aec97,Namespace:calico-system,Attempt:0,}" Jul 15 11:31:13.669232 env[1206]: time="2025-07-15T11:31:13.669108794Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f9f8586f4-vwl5f,Uid:d07f2c58-b78d-4a49-8177-494f02e5ce78,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:31:13.754196 env[1206]: time="2025-07-15T11:31:13.754117861Z" level=error msg="Failed to destroy network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.754727 env[1206]: time="2025-07-15T11:31:13.754695596Z" level=error msg="encountered an error cleaning up failed sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.754861 env[1206]: time="2025-07-15T11:31:13.754817676Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-v8rh7,Uid:71dab566-ad70-43d5-83cf-f9e5d62752a1,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.755119 kubelet[1962]: E0715 11:31:13.755070 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.755218 kubelet[1962]: E0715 11:31:13.755142 1962 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-v8rh7" Jul 15 11:31:13.755218 kubelet[1962]: E0715 11:31:13.755164 1962 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-v8rh7" Jul 15 11:31:13.755276 kubelet[1962]: E0715 11:31:13.755222 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-v8rh7_kube-system(71dab566-ad70-43d5-83cf-f9e5d62752a1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-v8rh7_kube-system(71dab566-ad70-43d5-83cf-f9e5d62752a1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-v8rh7" podUID="71dab566-ad70-43d5-83cf-f9e5d62752a1" Jul 15 11:31:13.776188 env[1206]: time="2025-07-15T11:31:13.776106453Z" level=error msg="Failed to destroy network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.776478 env[1206]: time="2025-07-15T11:31:13.776444268Z" level=error msg="encountered an error cleaning up failed sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.776529 env[1206]: time="2025-07-15T11:31:13.776493741Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6456cf68ff-f76xh,Uid:2bb8a107-93a8-4665-8e4a-6f408ffa9fa9,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.778520 kubelet[1962]: E0715 11:31:13.776739 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.778520 kubelet[1962]: E0715 11:31:13.776813 1962 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6456cf68ff-f76xh" Jul 15 11:31:13.778520 kubelet[1962]: E0715 11:31:13.776848 1962 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6456cf68ff-f76xh" Jul 15 11:31:13.778795 kubelet[1962]: E0715 11:31:13.776901 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6456cf68ff-f76xh_calico-system(2bb8a107-93a8-4665-8e4a-6f408ffa9fa9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6456cf68ff-f76xh_calico-system(2bb8a107-93a8-4665-8e4a-6f408ffa9fa9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6456cf68ff-f76xh" podUID="2bb8a107-93a8-4665-8e4a-6f408ffa9fa9" Jul 15 11:31:13.789938 env[1206]: time="2025-07-15T11:31:13.789865715Z" level=error msg="Failed to destroy network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.790271 env[1206]: time="2025-07-15T11:31:13.790232584Z" level=error msg="encountered an error cleaning up failed sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.790329 env[1206]: time="2025-07-15T11:31:13.790281906Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-k9t6m,Uid:2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.790538 kubelet[1962]: E0715 11:31:13.790489 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.790615 kubelet[1962]: E0715 11:31:13.790552 1962 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-k9t6m" Jul 15 11:31:13.790615 kubelet[1962]: E0715 11:31:13.790573 1962 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-k9t6m" Jul 15 11:31:13.790670 kubelet[1962]: E0715 11:31:13.790628 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-k9t6m_kube-system(2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-k9t6m_kube-system(2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-k9t6m" podUID="2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6" Jul 15 11:31:13.803277 env[1206]: time="2025-07-15T11:31:13.803190981Z" level=error msg="Failed to destroy network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.803714 env[1206]: time="2025-07-15T11:31:13.803611049Z" level=error msg="encountered an error cleaning up failed sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.803768 env[1206]: time="2025-07-15T11:31:13.803662406Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f5fb48689-4zmxm,Uid:adce578c-d5dc-4d8e-aaf3-a574713b1977,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.804039 kubelet[1962]: E0715 11:31:13.803984 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.804130 kubelet[1962]: E0715 11:31:13.804048 1962 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5f5fb48689-4zmxm" Jul 15 11:31:13.804130 kubelet[1962]: E0715 11:31:13.804070 1962 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5f5fb48689-4zmxm" Jul 15 11:31:13.804200 kubelet[1962]: E0715 11:31:13.804123 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5f5fb48689-4zmxm_calico-system(adce578c-d5dc-4d8e-aaf3-a574713b1977)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5f5fb48689-4zmxm_calico-system(adce578c-d5dc-4d8e-aaf3-a574713b1977)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5f5fb48689-4zmxm" podUID="adce578c-d5dc-4d8e-aaf3-a574713b1977" Jul 15 11:31:13.809731 env[1206]: time="2025-07-15T11:31:13.809656958Z" level=error msg="Failed to destroy network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.810030 env[1206]: time="2025-07-15T11:31:13.810000033Z" level=error msg="encountered an error cleaning up failed sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.810097 env[1206]: time="2025-07-15T11:31:13.810050438Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-fss4l,Uid:5bc46ac2-129e-430f-97e3-3a35e48aec97,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.810283 kubelet[1962]: E0715 11:31:13.810244 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.810359 kubelet[1962]: E0715 11:31:13.810307 1962 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-fss4l" Jul 15 11:31:13.810359 kubelet[1962]: E0715 11:31:13.810327 1962 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-fss4l" Jul 15 11:31:13.810416 kubelet[1962]: E0715 11:31:13.810380 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-fss4l_calico-system(5bc46ac2-129e-430f-97e3-3a35e48aec97)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-fss4l_calico-system(5bc46ac2-129e-430f-97e3-3a35e48aec97)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-fss4l" podUID="5bc46ac2-129e-430f-97e3-3a35e48aec97" Jul 15 11:31:13.811446 env[1206]: time="2025-07-15T11:31:13.811400214Z" level=error msg="Failed to destroy network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.811687 env[1206]: time="2025-07-15T11:31:13.811640325Z" level=error msg="encountered an error cleaning up failed sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.811925 env[1206]: time="2025-07-15T11:31:13.811864216Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f9f8586f4-wxd59,Uid:1c2b5616-5ace-4ead-8736-0b037583204d,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.812007 kubelet[1962]: E0715 11:31:13.811986 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.812096 kubelet[1962]: E0715 11:31:13.812009 1962 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-f9f8586f4-wxd59" Jul 15 11:31:13.812096 kubelet[1962]: E0715 11:31:13.812046 1962 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-f9f8586f4-wxd59" Jul 15 11:31:13.812096 kubelet[1962]: E0715 11:31:13.812078 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-f9f8586f4-wxd59_calico-apiserver(1c2b5616-5ace-4ead-8736-0b037583204d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-f9f8586f4-wxd59_calico-apiserver(1c2b5616-5ace-4ead-8736-0b037583204d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-f9f8586f4-wxd59" podUID="1c2b5616-5ace-4ead-8736-0b037583204d" Jul 15 11:31:13.819261 env[1206]: time="2025-07-15T11:31:13.819202423Z" level=error msg="Failed to destroy network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.819550 env[1206]: time="2025-07-15T11:31:13.819514088Z" level=error msg="encountered an error cleaning up failed sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.819594 env[1206]: time="2025-07-15T11:31:13.819570474Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f9f8586f4-vwl5f,Uid:d07f2c58-b78d-4a49-8177-494f02e5ce78,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.819806 kubelet[1962]: E0715 11:31:13.819765 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:13.819881 kubelet[1962]: E0715 11:31:13.819808 1962 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-f9f8586f4-vwl5f" Jul 15 11:31:13.819881 kubelet[1962]: E0715 11:31:13.819823 1962 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-f9f8586f4-vwl5f" Jul 15 11:31:13.819881 kubelet[1962]: E0715 11:31:13.819871 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-f9f8586f4-vwl5f_calico-apiserver(d07f2c58-b78d-4a49-8177-494f02e5ce78)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-f9f8586f4-vwl5f_calico-apiserver(d07f2c58-b78d-4a49-8177-494f02e5ce78)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-f9f8586f4-vwl5f" podUID="d07f2c58-b78d-4a49-8177-494f02e5ce78" Jul 15 11:31:14.181930 kubelet[1962]: I0715 11:31:14.181881 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:14.182799 env[1206]: time="2025-07-15T11:31:14.182764257Z" level=info msg="StopPodSandbox for \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\"" Jul 15 11:31:14.183493 kubelet[1962]: I0715 11:31:14.183466 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:14.184286 env[1206]: time="2025-07-15T11:31:14.184228427Z" level=info msg="StopPodSandbox for \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\"" Jul 15 11:31:14.184641 kubelet[1962]: I0715 11:31:14.184617 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:14.185184 env[1206]: time="2025-07-15T11:31:14.185138628Z" level=info msg="StopPodSandbox for \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\"" Jul 15 11:31:14.187564 env[1206]: time="2025-07-15T11:31:14.187532123Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:31:14.188355 kubelet[1962]: I0715 11:31:14.188320 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:14.188880 env[1206]: time="2025-07-15T11:31:14.188843547Z" level=info msg="StopPodSandbox for \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\"" Jul 15 11:31:14.191084 kubelet[1962]: I0715 11:31:14.191051 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:14.191766 env[1206]: time="2025-07-15T11:31:14.191730911Z" level=info msg="StopPodSandbox for \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\"" Jul 15 11:31:14.192710 kubelet[1962]: I0715 11:31:14.192655 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:14.193085 env[1206]: time="2025-07-15T11:31:14.193061932Z" level=info msg="StopPodSandbox for \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\"" Jul 15 11:31:14.197124 kubelet[1962]: I0715 11:31:14.197079 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:14.197563 env[1206]: time="2025-07-15T11:31:14.197531348Z" level=info msg="StopPodSandbox for \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\"" Jul 15 11:31:14.219578 env[1206]: time="2025-07-15T11:31:14.219523161Z" level=error msg="StopPodSandbox for \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\" failed" error="failed to destroy network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:14.220071 kubelet[1962]: E0715 11:31:14.219925 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:14.220071 kubelet[1962]: E0715 11:31:14.219972 1962 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff"} Jul 15 11:31:14.220071 kubelet[1962]: E0715 11:31:14.220022 1962 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5bc46ac2-129e-430f-97e3-3a35e48aec97\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:31:14.220071 kubelet[1962]: E0715 11:31:14.220042 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5bc46ac2-129e-430f-97e3-3a35e48aec97\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-fss4l" podUID="5bc46ac2-129e-430f-97e3-3a35e48aec97" Jul 15 11:31:14.237805 env[1206]: time="2025-07-15T11:31:14.237749250Z" level=error msg="StopPodSandbox for \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\" failed" error="failed to destroy network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:14.238370 kubelet[1962]: E0715 11:31:14.238194 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:14.238370 kubelet[1962]: E0715 11:31:14.238251 1962 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706"} Jul 15 11:31:14.238370 kubelet[1962]: E0715 11:31:14.238296 1962 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1c2b5616-5ace-4ead-8736-0b037583204d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:31:14.238370 kubelet[1962]: E0715 11:31:14.238318 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1c2b5616-5ace-4ead-8736-0b037583204d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-f9f8586f4-wxd59" podUID="1c2b5616-5ace-4ead-8736-0b037583204d" Jul 15 11:31:14.249903 env[1206]: time="2025-07-15T11:31:14.249829293Z" level=error msg="StopPodSandbox for \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\" failed" error="failed to destroy network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:14.250099 kubelet[1962]: E0715 11:31:14.250059 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:14.250173 kubelet[1962]: E0715 11:31:14.250111 1962 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b"} Jul 15 11:31:14.250173 kubelet[1962]: E0715 11:31:14.250146 1962 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:31:14.250275 kubelet[1962]: E0715 11:31:14.250174 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-k9t6m" podUID="2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6" Jul 15 11:31:14.250731 env[1206]: time="2025-07-15T11:31:14.250652950Z" level=error msg="StopPodSandbox for \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\" failed" error="failed to destroy network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:14.251147 kubelet[1962]: E0715 11:31:14.251031 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:14.251147 kubelet[1962]: E0715 11:31:14.251072 1962 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69"} Jul 15 11:31:14.251147 kubelet[1962]: E0715 11:31:14.251091 1962 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d07f2c58-b78d-4a49-8177-494f02e5ce78\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:31:14.251147 kubelet[1962]: E0715 11:31:14.251108 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d07f2c58-b78d-4a49-8177-494f02e5ce78\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-f9f8586f4-vwl5f" podUID="d07f2c58-b78d-4a49-8177-494f02e5ce78" Jul 15 11:31:14.262541 env[1206]: time="2025-07-15T11:31:14.262470151Z" level=error msg="StopPodSandbox for \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\" failed" error="failed to destroy network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:14.262866 env[1206]: time="2025-07-15T11:31:14.262623348Z" level=error msg="StopPodSandbox for \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\" failed" error="failed to destroy network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:14.262897 kubelet[1962]: E0715 11:31:14.262716 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:14.262897 kubelet[1962]: E0715 11:31:14.262762 1962 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b"} Jul 15 11:31:14.262897 kubelet[1962]: E0715 11:31:14.262796 1962 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:31:14.262897 kubelet[1962]: E0715 11:31:14.262800 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:14.263043 kubelet[1962]: E0715 11:31:14.262816 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6456cf68ff-f76xh" podUID="2bb8a107-93a8-4665-8e4a-6f408ffa9fa9" Jul 15 11:31:14.263043 kubelet[1962]: E0715 11:31:14.262824 1962 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2"} Jul 15 11:31:14.263043 kubelet[1962]: E0715 11:31:14.262861 1962 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"adce578c-d5dc-4d8e-aaf3-a574713b1977\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:31:14.263043 kubelet[1962]: E0715 11:31:14.262879 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"adce578c-d5dc-4d8e-aaf3-a574713b1977\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5f5fb48689-4zmxm" podUID="adce578c-d5dc-4d8e-aaf3-a574713b1977" Jul 15 11:31:14.269741 env[1206]: time="2025-07-15T11:31:14.269698770Z" level=error msg="StopPodSandbox for \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\" failed" error="failed to destroy network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:14.269893 kubelet[1962]: E0715 11:31:14.269831 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:14.269893 kubelet[1962]: E0715 11:31:14.269857 1962 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f"} Jul 15 11:31:14.269893 kubelet[1962]: E0715 11:31:14.269886 1962 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"71dab566-ad70-43d5-83cf-f9e5d62752a1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:31:14.270025 kubelet[1962]: E0715 11:31:14.269907 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"71dab566-ad70-43d5-83cf-f9e5d62752a1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-v8rh7" podUID="71dab566-ad70-43d5-83cf-f9e5d62752a1" Jul 15 11:31:14.277504 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b-shm.mount: Deactivated successfully. Jul 15 11:31:14.989651 systemd[1]: Created slice kubepods-besteffort-podb2372bb1_56e8_428a_9553_632abd324bfd.slice. Jul 15 11:31:14.992070 env[1206]: time="2025-07-15T11:31:14.992032323Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hnmdh,Uid:b2372bb1-56e8-428a-9553-632abd324bfd,Namespace:calico-system,Attempt:0,}" Jul 15 11:31:15.047927 env[1206]: time="2025-07-15T11:31:15.047862122Z" level=error msg="Failed to destroy network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:15.048261 env[1206]: time="2025-07-15T11:31:15.048219183Z" level=error msg="encountered an error cleaning up failed sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:15.048295 env[1206]: time="2025-07-15T11:31:15.048273866Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hnmdh,Uid:b2372bb1-56e8-428a-9553-632abd324bfd,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:15.048576 kubelet[1962]: E0715 11:31:15.048521 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:15.048576 kubelet[1962]: E0715 11:31:15.048592 1962 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-hnmdh" Jul 15 11:31:15.048812 kubelet[1962]: E0715 11:31:15.048614 1962 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-hnmdh" Jul 15 11:31:15.048812 kubelet[1962]: E0715 11:31:15.048658 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-hnmdh_calico-system(b2372bb1-56e8-428a-9553-632abd324bfd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-hnmdh_calico-system(b2372bb1-56e8-428a-9553-632abd324bfd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-hnmdh" podUID="b2372bb1-56e8-428a-9553-632abd324bfd" Jul 15 11:31:15.049961 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948-shm.mount: Deactivated successfully. Jul 15 11:31:15.199999 kubelet[1962]: I0715 11:31:15.199957 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:15.200566 env[1206]: time="2025-07-15T11:31:15.200519177Z" level=info msg="StopPodSandbox for \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\"" Jul 15 11:31:15.222325 env[1206]: time="2025-07-15T11:31:15.222261427Z" level=error msg="StopPodSandbox for \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\" failed" error="failed to destroy network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:31:15.222536 kubelet[1962]: E0715 11:31:15.222491 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:15.222583 kubelet[1962]: E0715 11:31:15.222541 1962 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948"} Jul 15 11:31:15.222583 kubelet[1962]: E0715 11:31:15.222576 1962 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b2372bb1-56e8-428a-9553-632abd324bfd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:31:15.222690 kubelet[1962]: E0715 11:31:15.222598 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b2372bb1-56e8-428a-9553-632abd324bfd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-hnmdh" podUID="b2372bb1-56e8-428a-9553-632abd324bfd" Jul 15 11:31:18.535139 kubelet[1962]: I0715 11:31:18.535101 1962 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:31:18.535614 kubelet[1962]: E0715 11:31:18.535587 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:18.920000 audit[3288]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:18.920000 audit[3288]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe2743efc0 a2=0 a3=7ffe2743efac items=0 ppid=2149 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:18.928254 kernel: audit: type=1325 audit(1752579078.920:1016): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:18.928321 kernel: audit: type=1300 audit(1752579078.920:1016): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe2743efc0 a2=0 a3=7ffe2743efac items=0 ppid=2149 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:18.928348 kernel: audit: type=1327 audit(1752579078.920:1016): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:18.920000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:18.931000 audit[3288]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:18.931000 audit[3288]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe2743efc0 a2=0 a3=7ffe2743efac items=0 ppid=2149 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:18.938948 kernel: audit: type=1325 audit(1752579078.931:1017): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:18.939018 kernel: audit: type=1300 audit(1752579078.931:1017): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe2743efc0 a2=0 a3=7ffe2743efac items=0 ppid=2149 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:18.939058 kernel: audit: type=1327 audit(1752579078.931:1017): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:18.931000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:19.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.56:22-10.0.0.1:42858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:19.160274 systemd[1]: Started sshd@7-10.0.0.56:22-10.0.0.1:42858.service. Jul 15 11:31:19.164711 kernel: audit: type=1130 audit(1752579079.159:1018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.56:22-10.0.0.1:42858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:19.201000 audit[3290]: USER_ACCT pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:19.202607 sshd[3290]: Accepted publickey for core from 10.0.0.1 port 42858 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:19.206442 kubelet[1962]: E0715 11:31:19.206142 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:19.205000 audit[3290]: CRED_ACQ pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:19.207051 sshd[3290]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:19.210860 kernel: audit: type=1101 audit(1752579079.201:1019): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:19.210953 kernel: audit: type=1103 audit(1752579079.205:1020): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:19.213376 kernel: audit: type=1006 audit(1752579079.205:1021): pid=3290 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 15 11:31:19.213152 systemd[1]: Started session-8.scope. Jul 15 11:31:19.205000 audit[3290]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7fd53ca0 a2=3 a3=0 items=0 ppid=1 pid=3290 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:19.205000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:19.213931 systemd-logind[1193]: New session 8 of user core. Jul 15 11:31:19.219000 audit[3290]: USER_START pid=3290 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:19.221000 audit[3292]: CRED_ACQ pid=3292 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:19.399412 sshd[3290]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:19.399000 audit[3290]: USER_END pid=3290 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:19.399000 audit[3290]: CRED_DISP pid=3290 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:19.402065 systemd[1]: sshd@7-10.0.0.56:22-10.0.0.1:42858.service: Deactivated successfully. Jul 15 11:31:19.402725 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:31:19.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.56:22-10.0.0.1:42858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:19.403251 systemd-logind[1193]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:31:19.403978 systemd-logind[1193]: Removed session 8. Jul 15 11:31:22.551617 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2048478658.mount: Deactivated successfully. Jul 15 11:31:23.055051 env[1206]: time="2025-07-15T11:31:23.054971546Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:23.067562 env[1206]: time="2025-07-15T11:31:23.067529236Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:23.087225 env[1206]: time="2025-07-15T11:31:23.087148321Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:23.105542 env[1206]: time="2025-07-15T11:31:23.105477405Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:23.106083 env[1206]: time="2025-07-15T11:31:23.106046283Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 15 11:31:23.225034 env[1206]: time="2025-07-15T11:31:23.224963290Z" level=info msg="CreateContainer within sandbox \"d0c6a5d40ccc371a60941ff3e7657850646f037f8b6c735347c527294a8499a5\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:31:23.252984 env[1206]: time="2025-07-15T11:31:23.252919144Z" level=info msg="CreateContainer within sandbox \"d0c6a5d40ccc371a60941ff3e7657850646f037f8b6c735347c527294a8499a5\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"00252f326b142c84d58bfe4a3fa80fa5dc4b5064db9b9552f5acc87d017239d9\"" Jul 15 11:31:23.253456 env[1206]: time="2025-07-15T11:31:23.253418070Z" level=info msg="StartContainer for \"00252f326b142c84d58bfe4a3fa80fa5dc4b5064db9b9552f5acc87d017239d9\"" Jul 15 11:31:23.269546 systemd[1]: Started cri-containerd-00252f326b142c84d58bfe4a3fa80fa5dc4b5064db9b9552f5acc87d017239d9.scope. Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f2f2084e688 items=0 ppid=2567 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323532663332366231343263383464353862666534613366613830 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.284000 audit: BPF prog-id=137 op=LOAD Jul 15 11:31:23.284000 audit[3312]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000292b58 items=0 ppid=2567 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323532663332366231343263383464353862666534613366613830 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit: BPF prog-id=138 op=LOAD Jul 15 11:31:23.285000 audit[3312]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000292ba8 items=0 ppid=2567 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323532663332366231343263383464353862666534613366613830 Jul 15 11:31:23.285000 audit: BPF prog-id=138 op=UNLOAD Jul 15 11:31:23.285000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.285000 audit: BPF prog-id=139 op=LOAD Jul 15 11:31:23.285000 audit[3312]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000292c38 items=0 ppid=2567 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323532663332366231343263383464353862666534613366613830 Jul 15 11:31:23.453029 env[1206]: time="2025-07-15T11:31:23.452983345Z" level=info msg="StartContainer for \"00252f326b142c84d58bfe4a3fa80fa5dc4b5064db9b9552f5acc87d017239d9\" returns successfully" Jul 15 11:31:23.479436 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:31:23.479550 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:31:23.553560 env[1206]: time="2025-07-15T11:31:23.553510334Z" level=info msg="StopPodSandbox for \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\"" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.604 [INFO][3370] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.604 [INFO][3370] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" iface="eth0" netns="/var/run/netns/cni-f50ecfe1-1284-60c0-c9b9-41381ed4927b" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.604 [INFO][3370] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" iface="eth0" netns="/var/run/netns/cni-f50ecfe1-1284-60c0-c9b9-41381ed4927b" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.604 [INFO][3370] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" iface="eth0" netns="/var/run/netns/cni-f50ecfe1-1284-60c0-c9b9-41381ed4927b" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.604 [INFO][3370] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.604 [INFO][3370] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.666 [INFO][3379] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" HandleID="k8s-pod-network.22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Workload="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.666 [INFO][3379] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.666 [INFO][3379] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.674 [WARNING][3379] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" HandleID="k8s-pod-network.22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Workload="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.674 [INFO][3379] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" HandleID="k8s-pod-network.22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Workload="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.675 [INFO][3379] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:23.679235 env[1206]: 2025-07-15 11:31:23.677 [INFO][3370] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:23.679847 env[1206]: time="2025-07-15T11:31:23.679396292Z" level=info msg="TearDown network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\" successfully" Jul 15 11:31:23.679847 env[1206]: time="2025-07-15T11:31:23.679432230Z" level=info msg="StopPodSandbox for \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\" returns successfully" Jul 15 11:31:23.681430 systemd[1]: run-netns-cni\x2df50ecfe1\x2d1284\x2d60c0\x2dc9b9\x2d41381ed4927b.mount: Deactivated successfully. Jul 15 11:31:23.788729 kubelet[1962]: I0715 11:31:23.788534 1962 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-whisker-ca-bundle\") pod \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\" (UID: \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\") " Jul 15 11:31:23.788729 kubelet[1962]: I0715 11:31:23.788598 1962 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-whisker-backend-key-pair\") pod \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\" (UID: \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\") " Jul 15 11:31:23.788729 kubelet[1962]: I0715 11:31:23.788645 1962 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-dd6nw\" (UniqueName: \"kubernetes.io/projected/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-kube-api-access-dd6nw\") pod \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\" (UID: \"2bb8a107-93a8-4665-8e4a-6f408ffa9fa9\") " Jul 15 11:31:23.789290 kubelet[1962]: I0715 11:31:23.789030 1962 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "2bb8a107-93a8-4665-8e4a-6f408ffa9fa9" (UID: "2bb8a107-93a8-4665-8e4a-6f408ffa9fa9"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 15 11:31:23.791646 kubelet[1962]: I0715 11:31:23.791614 1962 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-kube-api-access-dd6nw" (OuterVolumeSpecName: "kube-api-access-dd6nw") pod "2bb8a107-93a8-4665-8e4a-6f408ffa9fa9" (UID: "2bb8a107-93a8-4665-8e4a-6f408ffa9fa9"). InnerVolumeSpecName "kube-api-access-dd6nw". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 15 11:31:23.793610 kubelet[1962]: I0715 11:31:23.793578 1962 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "2bb8a107-93a8-4665-8e4a-6f408ffa9fa9" (UID: "2bb8a107-93a8-4665-8e4a-6f408ffa9fa9"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 15 11:31:23.793891 systemd[1]: var-lib-kubelet-pods-2bb8a107\x2d93a8\x2d4665\x2d8e4a\x2d6f408ffa9fa9-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ddd6nw.mount: Deactivated successfully. Jul 15 11:31:23.794026 systemd[1]: var-lib-kubelet-pods-2bb8a107\x2d93a8\x2d4665\x2d8e4a\x2d6f408ffa9fa9-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:31:23.889175 kubelet[1962]: I0715 11:31:23.889106 1962 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:31:23.889175 kubelet[1962]: I0715 11:31:23.889145 1962 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:31:23.889175 kubelet[1962]: I0715 11:31:23.889154 1962 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-dd6nw\" (UniqueName: \"kubernetes.io/projected/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9-kube-api-access-dd6nw\") on node \"localhost\" DevicePath \"\"" Jul 15 11:31:23.990706 systemd[1]: Removed slice kubepods-besteffort-pod2bb8a107_93a8_4665_8e4a_6f408ffa9fa9.slice. Jul 15 11:31:24.404212 systemd[1]: Started sshd@8-10.0.0.56:22-10.0.0.1:47966.service. Jul 15 11:31:24.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.56:22-10.0.0.1:47966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:24.405573 kernel: kauditd_printk_skb: 50 callbacks suppressed Jul 15 11:31:24.405759 kernel: audit: type=1130 audit(1752579084.403:1033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.56:22-10.0.0.1:47966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:24.441000 audit[3401]: USER_ACCT pid=3401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.442838 sshd[3401]: Accepted publickey for core from 10.0.0.1 port 47966 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:24.446076 sshd[3401]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:24.444000 audit[3401]: CRED_ACQ pid=3401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.449452 systemd-logind[1193]: New session 9 of user core. Jul 15 11:31:24.450244 systemd[1]: Started session-9.scope. Jul 15 11:31:24.450419 kernel: audit: type=1101 audit(1752579084.441:1034): pid=3401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.450464 kernel: audit: type=1103 audit(1752579084.444:1035): pid=3401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.450485 kernel: audit: type=1006 audit(1752579084.445:1036): pid=3401 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 15 11:31:24.456705 kernel: audit: type=1300 audit(1752579084.445:1036): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9b9b64f0 a2=3 a3=0 items=0 ppid=1 pid=3401 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:24.445000 audit[3401]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9b9b64f0 a2=3 a3=0 items=0 ppid=1 pid=3401 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:24.445000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:24.458319 kernel: audit: type=1327 audit(1752579084.445:1036): proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:24.458365 kernel: audit: type=1105 audit(1752579084.452:1037): pid=3401 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.452000 audit[3401]: USER_START pid=3401 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.462466 kernel: audit: type=1103 audit(1752579084.453:1038): pid=3403 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.453000 audit[3403]: CRED_ACQ pid=3403 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.615202 sshd[3401]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:24.615000 audit[3401]: USER_END pid=3401 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.617622 systemd[1]: sshd@8-10.0.0.56:22-10.0.0.1:47966.service: Deactivated successfully. Jul 15 11:31:24.618343 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:31:24.618881 systemd-logind[1193]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:31:24.619550 systemd-logind[1193]: Removed session 9. Jul 15 11:31:24.615000 audit[3401]: CRED_DISP pid=3401 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.623708 kernel: audit: type=1106 audit(1752579084.615:1039): pid=3401 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.623764 kernel: audit: type=1104 audit(1752579084.615:1040): pid=3401 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:24.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.56:22-10.0.0.1:47966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:24.707000 audit[3443]: AVC avc: denied { write } for pid=3443 comm="tee" name="fd" dev="proc" ino=25377 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:31:24.707000 audit[3443]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc05dfa7ee a2=241 a3=1b6 items=1 ppid=3422 pid=3443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:24.707000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:31:24.707000 audit: PATH item=0 name="/dev/fd/63" inode=23472 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:24.707000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:31:24.709000 audit[3448]: AVC avc: denied { write } for pid=3448 comm="tee" name="fd" dev="proc" ino=25381 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:31:24.709000 audit[3448]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc7d21e7ed a2=241 a3=1b6 items=1 ppid=3423 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:24.709000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:31:24.709000 audit: PATH item=0 name="/dev/fd/63" inode=25374 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:24.709000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:31:24.710000 audit[3456]: AVC avc: denied { write } for pid=3456 comm="tee" name="fd" dev="proc" ino=25728 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:31:24.710000 audit[3456]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe50dcb7de a2=241 a3=1b6 items=1 ppid=3425 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:24.710000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:31:24.710000 audit: PATH item=0 name="/dev/fd/63" inode=25725 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:24.710000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:31:24.712000 audit[3451]: AVC avc: denied { write } for pid=3451 comm="tee" name="fd" dev="proc" ino=24382 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:31:24.712000 audit[3451]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe401d47ed a2=241 a3=1b6 items=1 ppid=3428 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:24.712000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:31:24.712000 audit: PATH item=0 name="/dev/fd/63" inode=24374 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:24.712000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:31:24.713000 audit[3459]: AVC avc: denied { write } for pid=3459 comm="tee" name="fd" dev="proc" ino=25733 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:31:24.713000 audit[3459]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe807707ef a2=241 a3=1b6 items=1 ppid=3427 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:24.713000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:31:24.713000 audit: PATH item=0 name="/dev/fd/63" inode=24379 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:24.713000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:31:24.714000 audit[3463]: AVC avc: denied { write } for pid=3463 comm="tee" name="fd" dev="proc" ino=25737 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:31:24.714000 audit[3463]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff17fc47dd a2=241 a3=1b6 items=1 ppid=3430 pid=3463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:24.714000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:31:24.714000 audit: PATH item=0 name="/dev/fd/63" inode=25385 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:24.714000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:31:24.714000 audit[3464]: AVC avc: denied { write } for pid=3464 comm="tee" name="fd" dev="proc" ino=24386 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:31:24.714000 audit[3464]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd4e9747ed a2=241 a3=1b6 items=1 ppid=3433 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:24.714000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:31:24.714000 audit: PATH item=0 name="/dev/fd/63" inode=25730 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:24.714000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:31:24.986102 env[1206]: time="2025-07-15T11:31:24.986000128Z" level=info msg="StopPodSandbox for \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\"" Jul 15 11:31:25.624411 kubelet[1962]: I0715 11:31:25.624350 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-w8lx7" podStartSLOduration=2.942785284 podStartE2EDuration="24.624326245s" podCreationTimestamp="2025-07-15 11:31:01 +0000 UTC" firstStartedPulling="2025-07-15 11:31:01.425909357 +0000 UTC m=+21.537156806" lastFinishedPulling="2025-07-15 11:31:23.107450318 +0000 UTC m=+43.218697767" observedRunningTime="2025-07-15 11:31:25.611216251 +0000 UTC m=+45.722463730" watchObservedRunningTime="2025-07-15 11:31:25.624326245 +0000 UTC m=+45.735573694" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.626 [INFO][3507] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.626 [INFO][3507] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" iface="eth0" netns="/var/run/netns/cni-08f69981-22e6-1bfb-0f8b-4d9878892dc5" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.626 [INFO][3507] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" iface="eth0" netns="/var/run/netns/cni-08f69981-22e6-1bfb-0f8b-4d9878892dc5" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.626 [INFO][3507] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" iface="eth0" netns="/var/run/netns/cni-08f69981-22e6-1bfb-0f8b-4d9878892dc5" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.626 [INFO][3507] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.626 [INFO][3507] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.656 [INFO][3551] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" HandleID="k8s-pod-network.ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.656 [INFO][3551] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.656 [INFO][3551] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.717 [WARNING][3551] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" HandleID="k8s-pod-network.ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.717 [INFO][3551] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" HandleID="k8s-pod-network.ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.720 [INFO][3551] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:25.724112 env[1206]: 2025-07-15 11:31:25.721 [INFO][3507] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:25.724804 env[1206]: time="2025-07-15T11:31:25.724771576Z" level=info msg="TearDown network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\" successfully" Jul 15 11:31:25.724804 env[1206]: time="2025-07-15T11:31:25.724802354Z" level=info msg="StopPodSandbox for \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\" returns successfully" Jul 15 11:31:25.725504 kubelet[1962]: E0715 11:31:25.725093 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:25.725780 env[1206]: time="2025-07-15T11:31:25.725759912Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-v8rh7,Uid:71dab566-ad70-43d5-83cf-f9e5d62752a1,Namespace:kube-system,Attempt:1,}" Jul 15 11:31:25.726739 systemd[1]: run-netns-cni\x2d08f69981\x2d22e6\x2d1bfb\x2d0f8b\x2d4d9878892dc5.mount: Deactivated successfully. Jul 15 11:31:25.965789 systemd[1]: Created slice kubepods-besteffort-podf7d9e08d_02b7_4765_bc78_c54a12a2591e.slice. Jul 15 11:31:25.986787 env[1206]: time="2025-07-15T11:31:25.986718508Z" level=info msg="StopPodSandbox for \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\"" Jul 15 11:31:25.987367 env[1206]: time="2025-07-15T11:31:25.987342841Z" level=info msg="StopPodSandbox for \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\"" Jul 15 11:31:25.987987 kubelet[1962]: I0715 11:31:25.987952 1962 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="2bb8a107-93a8-4665-8e4a-6f408ffa9fa9" path="/var/lib/kubelet/pods/2bb8a107-93a8-4665-8e4a-6f408ffa9fa9/volumes" Jul 15 11:31:26.002663 kubelet[1962]: I0715 11:31:26.002169 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f7d9e08d-02b7-4765-bc78-c54a12a2591e-whisker-backend-key-pair\") pod \"whisker-6d94f7df8f-7ndfv\" (UID: \"f7d9e08d-02b7-4765-bc78-c54a12a2591e\") " pod="calico-system/whisker-6d94f7df8f-7ndfv" Jul 15 11:31:26.002663 kubelet[1962]: I0715 11:31:26.002220 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f7d9e08d-02b7-4765-bc78-c54a12a2591e-whisker-ca-bundle\") pod \"whisker-6d94f7df8f-7ndfv\" (UID: \"f7d9e08d-02b7-4765-bc78-c54a12a2591e\") " pod="calico-system/whisker-6d94f7df8f-7ndfv" Jul 15 11:31:26.002663 kubelet[1962]: I0715 11:31:26.002271 1962 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vvswh\" (UniqueName: \"kubernetes.io/projected/f7d9e08d-02b7-4765-bc78-c54a12a2591e-kube-api-access-vvswh\") pod \"whisker-6d94f7df8f-7ndfv\" (UID: \"f7d9e08d-02b7-4765-bc78-c54a12a2591e\") " pod="calico-system/whisker-6d94f7df8f-7ndfv" Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit: BPF prog-id=140 op=LOAD Jul 15 11:31:26.431000 audit[3683]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd5d0db450 a2=98 a3=1fffffffffffffff items=0 ppid=3538 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.431000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:31:26.431000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit: BPF prog-id=141 op=LOAD Jul 15 11:31:26.431000 audit[3683]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd5d0db330 a2=94 a3=3 items=0 ppid=3538 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.431000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:31:26.431000 audit: BPF prog-id=141 op=UNLOAD Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit: BPF prog-id=142 op=LOAD Jul 15 11:31:26.431000 audit[3683]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd5d0db370 a2=94 a3=7ffd5d0db550 items=0 ppid=3538 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.431000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:31:26.431000 audit: BPF prog-id=142 op=UNLOAD Jul 15 11:31:26.431000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.431000 audit[3683]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffd5d0db440 a2=50 a3=a000000085 items=0 ppid=3538 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.431000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit: BPF prog-id=143 op=LOAD Jul 15 11:31:26.432000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc8e912990 a2=98 a3=3 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.432000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.432000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit: BPF prog-id=144 op=LOAD Jul 15 11:31:26.432000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc8e912780 a2=94 a3=54428f items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.432000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.432000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.432000 audit: BPF prog-id=145 op=LOAD Jul 15 11:31:26.432000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc8e9127b0 a2=94 a3=2 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.432000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.433000 audit: BPF prog-id=145 op=UNLOAD Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.385 [INFO][3603] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.388 [INFO][3603] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" iface="eth0" netns="/var/run/netns/cni-334d3114-ee45-8105-89bb-38568a8ded3f" Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.388 [INFO][3603] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" iface="eth0" netns="/var/run/netns/cni-334d3114-ee45-8105-89bb-38568a8ded3f" Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.389 [INFO][3603] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" iface="eth0" netns="/var/run/netns/cni-334d3114-ee45-8105-89bb-38568a8ded3f" Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.389 [INFO][3603] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.389 [INFO][3603] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.419 [INFO][3657] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" HandleID="k8s-pod-network.b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.420 [INFO][3657] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.420 [INFO][3657] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.426 [WARNING][3657] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" HandleID="k8s-pod-network.b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.426 [INFO][3657] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" HandleID="k8s-pod-network.b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.428 [INFO][3657] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:26.441941 env[1206]: 2025-07-15 11:31:26.430 [INFO][3603] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:26.441941 env[1206]: time="2025-07-15T11:31:26.433116052Z" level=info msg="TearDown network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\" successfully" Jul 15 11:31:26.441941 env[1206]: time="2025-07-15T11:31:26.433143964Z" level=info msg="StopPodSandbox for \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\" returns successfully" Jul 15 11:31:26.441941 env[1206]: time="2025-07-15T11:31:26.433835844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-fss4l,Uid:5bc46ac2-129e-430f-97e3-3a35e48aec97,Namespace:calico-system,Attempt:1,}" Jul 15 11:31:26.435428 systemd[1]: run-netns-cni\x2d334d3114\x2dee45\x2d8105\x2d89bb\x2d38568a8ded3f.mount: Deactivated successfully. Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.384 [INFO][3602] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.384 [INFO][3602] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" iface="eth0" netns="/var/run/netns/cni-f300f181-aa5a-3a46-8ddc-97caf6e23c48" Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.384 [INFO][3602] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" iface="eth0" netns="/var/run/netns/cni-f300f181-aa5a-3a46-8ddc-97caf6e23c48" Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.390 [INFO][3602] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" iface="eth0" netns="/var/run/netns/cni-f300f181-aa5a-3a46-8ddc-97caf6e23c48" Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.390 [INFO][3602] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.390 [INFO][3602] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.421 [INFO][3659] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" HandleID="k8s-pod-network.166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.421 [INFO][3659] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.428 [INFO][3659] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.444 [WARNING][3659] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" HandleID="k8s-pod-network.166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.444 [INFO][3659] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" HandleID="k8s-pod-network.166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.449 [INFO][3659] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:26.453150 env[1206]: 2025-07-15 11:31:26.451 [INFO][3602] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:26.453773 env[1206]: time="2025-07-15T11:31:26.453727623Z" level=info msg="TearDown network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\" successfully" Jul 15 11:31:26.453828 env[1206]: time="2025-07-15T11:31:26.453770774Z" level=info msg="StopPodSandbox for \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\" returns successfully" Jul 15 11:31:26.454497 env[1206]: time="2025-07-15T11:31:26.454472972Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f9f8586f4-vwl5f,Uid:d07f2c58-b78d-4a49-8177-494f02e5ce78,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:31:26.558002 systemd-networkd[1030]: cali7a72723608f: Link UP Jul 15 11:31:26.559702 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:31:26.559755 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7a72723608f: link becomes ready Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit: BPF prog-id=146 op=LOAD Jul 15 11:31:26.560000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc8e912670 a2=94 a3=1 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.560000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.560000 audit: BPF prog-id=146 op=UNLOAD Jul 15 11:31:26.560000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.560000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc8e912740 a2=50 a3=7ffc8e912820 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.560000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.561259 systemd-networkd[1030]: cali7a72723608f: Gained carrier Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc8e912680 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8e9126b0 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8e9125c0 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc8e9126d0 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc8e9126b0 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc8e9126a0 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc8e9126d0 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8e9126b0 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8e9126d0 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8e9126a0 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc8e912710 a2=28 a3=0 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc8e9124c0 a2=50 a3=1 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.568000 audit: BPF prog-id=147 op=LOAD Jul 15 11:31:26.568000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc8e9124c0 a2=94 a3=5 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.568000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.569000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc8e912570 a2=50 a3=1 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.569000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc8e912690 a2=4 a3=38 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.569000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { confidentiality } for pid=3684 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:31:26.569000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc8e9126e0 a2=94 a3=6 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.569000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { confidentiality } for pid=3684 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:31:26.569000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc8e911e90 a2=94 a3=88 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.569000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { perfmon } for pid=3684 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { bpf } for pid=3684 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.569000 audit[3684]: AVC avc: denied { confidentiality } for pid=3684 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:31:26.569000 audit[3684]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc8e911e90 a2=94 a3=88 items=0 ppid=3538 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.569000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:31:26.576094 env[1206]: time="2025-07-15T11:31:26.576046042Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6d94f7df8f-7ndfv,Uid:f7d9e08d-02b7-4765-bc78-c54a12a2591e,Namespace:calico-system,Attempt:0,}" Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit: BPF prog-id=148 op=LOAD Jul 15 11:31:26.581000 audit[3745]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc09fab590 a2=98 a3=1999999999999999 items=0 ppid=3538 pid=3745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.581000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:31:26.581000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit: BPF prog-id=149 op=LOAD Jul 15 11:31:26.581000 audit[3745]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc09fab470 a2=94 a3=ffff items=0 ppid=3538 pid=3745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.581000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:31:26.581000 audit: BPF prog-id=149 op=UNLOAD Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { perfmon } for pid=3745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit[3745]: AVC avc: denied { bpf } for pid=3745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.581000 audit: BPF prog-id=150 op=LOAD Jul 15 11:31:26.581000 audit[3745]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc09fab4b0 a2=94 a3=7ffc09fab690 items=0 ppid=3538 pid=3745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.581000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:31:26.581000 audit: BPF prog-id=150 op=UNLOAD Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.434 [INFO][3640] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0 coredns-674b8bbfcf- kube-system 71dab566-ad70-43d5-83cf-f9e5d62752a1 1035 0 2025-07-15 11:30:45 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-v8rh7 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali7a72723608f [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Namespace="kube-system" Pod="coredns-674b8bbfcf-v8rh7" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v8rh7-" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.434 [INFO][3640] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Namespace="kube-system" Pod="coredns-674b8bbfcf-v8rh7" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.486 [INFO][3686] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" HandleID="k8s-pod-network.0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.486 [INFO][3686] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" HandleID="k8s-pod-network.0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002e6fe0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-v8rh7", "timestamp":"2025-07-15 11:31:26.486547244 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.486 [INFO][3686] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.486 [INFO][3686] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.486 [INFO][3686] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.494 [INFO][3686] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" host="localhost" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.504 [INFO][3686] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.529 [INFO][3686] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.531 [INFO][3686] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.533 [INFO][3686] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.533 [INFO][3686] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" host="localhost" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.534 [INFO][3686] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6 Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.538 [INFO][3686] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" host="localhost" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.543 [INFO][3686] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" host="localhost" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.543 [INFO][3686] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" host="localhost" Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.543 [INFO][3686] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:26.592511 env[1206]: 2025-07-15 11:31:26.543 [INFO][3686] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" HandleID="k8s-pod-network.0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:26.593553 env[1206]: 2025-07-15 11:31:26.545 [INFO][3640] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Namespace="kube-system" Pod="coredns-674b8bbfcf-v8rh7" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"71dab566-ad70-43d5-83cf-f9e5d62752a1", ResourceVersion:"1035", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-v8rh7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7a72723608f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:26.593553 env[1206]: 2025-07-15 11:31:26.545 [INFO][3640] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Namespace="kube-system" Pod="coredns-674b8bbfcf-v8rh7" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:26.593553 env[1206]: 2025-07-15 11:31:26.545 [INFO][3640] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7a72723608f ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Namespace="kube-system" Pod="coredns-674b8bbfcf-v8rh7" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:26.593553 env[1206]: 2025-07-15 11:31:26.564 [INFO][3640] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Namespace="kube-system" Pod="coredns-674b8bbfcf-v8rh7" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:26.593553 env[1206]: 2025-07-15 11:31:26.566 [INFO][3640] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Namespace="kube-system" Pod="coredns-674b8bbfcf-v8rh7" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"71dab566-ad70-43d5-83cf-f9e5d62752a1", ResourceVersion:"1035", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6", Pod:"coredns-674b8bbfcf-v8rh7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7a72723608f", MAC:"7e:c2:11:4f:8f:a6", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:26.593553 env[1206]: 2025-07-15 11:31:26.589 [INFO][3640] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6" Namespace="kube-system" Pod="coredns-674b8bbfcf-v8rh7" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:26.637737 systemd-networkd[1030]: calif45cab70762: Link UP Jul 15 11:31:26.639700 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif45cab70762: link becomes ready Jul 15 11:31:26.639541 systemd-networkd[1030]: calif45cab70762: Gained carrier Jul 15 11:31:26.642473 env[1206]: time="2025-07-15T11:31:26.642412950Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:26.642559 env[1206]: time="2025-07-15T11:31:26.642452514Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:26.642559 env[1206]: time="2025-07-15T11:31:26.642479775Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:26.642671 env[1206]: time="2025-07-15T11:31:26.642639655Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6 pid=3787 runtime=io.containerd.runc.v2 Jul 15 11:31:26.646962 systemd-networkd[1030]: vxlan.calico: Link UP Jul 15 11:31:26.646970 systemd-networkd[1030]: vxlan.calico: Gained carrier Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.512 [INFO][3694] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--fss4l-eth0 goldmane-768f4c5c69- calico-system 5bc46ac2-129e-430f-97e3-3a35e48aec97 1049 0 2025-07-15 11:31:00 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-fss4l eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calif45cab70762 [] [] }} ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Namespace="calico-system" Pod="goldmane-768f4c5c69-fss4l" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--fss4l-" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.513 [INFO][3694] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Namespace="calico-system" Pod="goldmane-768f4c5c69-fss4l" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.550 [INFO][3724] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" HandleID="k8s-pod-network.f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.550 [INFO][3724] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" HandleID="k8s-pod-network.f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad490), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-fss4l", "timestamp":"2025-07-15 11:31:26.550220727 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.550 [INFO][3724] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.550 [INFO][3724] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.550 [INFO][3724] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.600 [INFO][3724] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" host="localhost" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.610 [INFO][3724] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.614 [INFO][3724] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.616 [INFO][3724] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.617 [INFO][3724] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.617 [INFO][3724] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" host="localhost" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.619 [INFO][3724] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2 Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.622 [INFO][3724] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" host="localhost" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.629 [INFO][3724] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" host="localhost" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.629 [INFO][3724] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" host="localhost" Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.629 [INFO][3724] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:26.656090 env[1206]: 2025-07-15 11:31:26.629 [INFO][3724] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" HandleID="k8s-pod-network.f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.656658 env[1206]: 2025-07-15 11:31:26.635 [INFO][3694] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Namespace="calico-system" Pod="goldmane-768f4c5c69-fss4l" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--fss4l-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"5bc46ac2-129e-430f-97e3-3a35e48aec97", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-fss4l", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif45cab70762", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:26.656658 env[1206]: 2025-07-15 11:31:26.636 [INFO][3694] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Namespace="calico-system" Pod="goldmane-768f4c5c69-fss4l" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.656658 env[1206]: 2025-07-15 11:31:26.636 [INFO][3694] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif45cab70762 ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Namespace="calico-system" Pod="goldmane-768f4c5c69-fss4l" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.656658 env[1206]: 2025-07-15 11:31:26.640 [INFO][3694] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Namespace="calico-system" Pod="goldmane-768f4c5c69-fss4l" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.656658 env[1206]: 2025-07-15 11:31:26.640 [INFO][3694] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Namespace="calico-system" Pod="goldmane-768f4c5c69-fss4l" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--fss4l-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"5bc46ac2-129e-430f-97e3-3a35e48aec97", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2", Pod:"goldmane-768f4c5c69-fss4l", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif45cab70762", MAC:"f2:ad:1c:40:14:d2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:26.656658 env[1206]: 2025-07-15 11:31:26.653 [INFO][3694] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2" Namespace="calico-system" Pod="goldmane-768f4c5c69-fss4l" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit: BPF prog-id=151 op=LOAD Jul 15 11:31:26.668000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc7bfea3a0 a2=98 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.668000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit: BPF prog-id=152 op=LOAD Jul 15 11:31:26.668000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc7bfea1b0 a2=94 a3=54428f items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.668000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.668000 audit: BPF prog-id=153 op=LOAD Jul 15 11:31:26.668000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc7bfea1e0 a2=94 a3=2 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit: BPF prog-id=153 op=UNLOAD Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc7bfea0b0 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc7bfea0e0 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc7bfe9ff0 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc7bfea100 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc7bfea0e0 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc7bfea0d0 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc7bfea100 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc7bfea0e0 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc7bfea100 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc7bfea0d0 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc7bfea140 a2=28 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit: BPF prog-id=154 op=LOAD Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc7bfe9fb0 a2=94 a3=0 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit: BPF prog-id=154 op=UNLOAD Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc7bfe9fa0 a2=50 a3=2800 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc7bfe9fa0 a2=50 a3=2800 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit: BPF prog-id=155 op=LOAD Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc7bfe97c0 a2=94 a3=2 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.669000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.669000 audit: BPF prog-id=156 op=LOAD Jul 15 11:31:26.669000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc7bfe98c0 a2=94 a3=30 items=0 ppid=3538 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:31:26.680824 systemd[1]: Started cri-containerd-0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6.scope. Jul 15 11:31:26.685777 env[1206]: time="2025-07-15T11:31:26.685531759Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:26.685777 env[1206]: time="2025-07-15T11:31:26.685571543Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:26.685777 env[1206]: time="2025-07-15T11:31:26.685580901Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:26.687493 env[1206]: time="2025-07-15T11:31:26.685786987Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2 pid=3827 runtime=io.containerd.runc.v2 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit: BPF prog-id=157 op=LOAD Jul 15 11:31:26.687000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc3cce1a40 a2=98 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.687000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.687000 audit: BPF prog-id=157 op=UNLOAD Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.687000 audit: BPF prog-id=158 op=LOAD Jul 15 11:31:26.687000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc3cce1830 a2=94 a3=54428f items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.687000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.688000 audit: BPF prog-id=158 op=UNLOAD Jul 15 11:31:26.688000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.688000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.688000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.688000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.688000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.688000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.688000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.688000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.688000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.688000 audit: BPF prog-id=159 op=LOAD Jul 15 11:31:26.688000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc3cce1860 a2=94 a3=2 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.688000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.688000 audit: BPF prog-id=159 op=UNLOAD Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.712000 audit: BPF prog-id=160 op=LOAD Jul 15 11:31:26.713000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.713000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3787 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064303065656361663935393738366533356337313961636633663631 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3787 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064303065656361663935393738366533356337313961636633663631 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.714000 audit: BPF prog-id=161 op=LOAD Jul 15 11:31:26.714000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000389040 items=0 ppid=3787 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064303065656361663935393738366533356337313961636633663631 Jul 15 11:31:26.715000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.715000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.715000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.715000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.715000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.715000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.715000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.715000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.715000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.715000 audit: BPF prog-id=162 op=LOAD Jul 15 11:31:26.715000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000389088 items=0 ppid=3787 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064303065656361663935393738366533356337313961636633663631 Jul 15 11:31:26.716000 audit: BPF prog-id=162 op=UNLOAD Jul 15 11:31:26.716000 audit: BPF prog-id=161 op=UNLOAD Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { perfmon } for pid=3797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit[3797]: AVC avc: denied { bpf } for pid=3797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.716000 audit: BPF prog-id=163 op=LOAD Jul 15 11:31:26.716000 audit[3797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000389498 items=0 ppid=3787 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064303065656361663935393738366533356337313961636633663631 Jul 15 11:31:26.718294 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:31:26.723446 systemd[1]: Started cri-containerd-f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2.scope. Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.733000 audit: BPF prog-id=164 op=LOAD Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000195c48 a2=10 a3=1c items=0 ppid=3827 pid=3864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639326237373135363534616438346237623933656630383235313631 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001956b0 a2=3c a3=c items=0 ppid=3827 pid=3864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639326237373135363534616438346237623933656630383235313631 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit: BPF prog-id=165 op=LOAD Jul 15 11:31:26.734000 audit[3864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001959d8 a2=78 a3=c0002e5d90 items=0 ppid=3827 pid=3864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639326237373135363534616438346237623933656630383235313631 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit: BPF prog-id=166 op=LOAD Jul 15 11:31:26.734000 audit[3864]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000195770 a2=78 a3=c0002e5dd8 items=0 ppid=3827 pid=3864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639326237373135363534616438346237623933656630383235313631 Jul 15 11:31:26.734000 audit: BPF prog-id=166 op=UNLOAD Jul 15 11:31:26.734000 audit: BPF prog-id=165 op=UNLOAD Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { perfmon } for pid=3864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit[3864]: AVC avc: denied { bpf } for pid=3864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.734000 audit: BPF prog-id=167 op=LOAD Jul 15 11:31:26.734000 audit[3864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000195c30 a2=78 a3=c0003dc1e8 items=0 ppid=3827 pid=3864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639326237373135363534616438346237623933656630383235313631 Jul 15 11:31:26.737577 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:31:26.748145 systemd-networkd[1030]: cali13ca3ced966: Link UP Jul 15 11:31:26.750760 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali13ca3ced966: link becomes ready Jul 15 11:31:26.750604 systemd-networkd[1030]: cali13ca3ced966: Gained carrier Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.525 [INFO][3703] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0 calico-apiserver-f9f8586f4- calico-apiserver d07f2c58-b78d-4a49-8177-494f02e5ce78 1050 0 2025-07-15 11:30:58 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:f9f8586f4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-f9f8586f4-vwl5f eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali13ca3ced966 [] [] }} ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-vwl5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.525 [INFO][3703] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-vwl5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.577 [INFO][3729] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" HandleID="k8s-pod-network.2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.577 [INFO][3729] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" HandleID="k8s-pod-network.2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001a5840), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-f9f8586f4-vwl5f", "timestamp":"2025-07-15 11:31:26.577308141 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.577 [INFO][3729] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.629 [INFO][3729] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.629 [INFO][3729] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.698 [INFO][3729] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" host="localhost" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.711 [INFO][3729] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.715 [INFO][3729] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.717 [INFO][3729] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.719 [INFO][3729] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.719 [INFO][3729] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" host="localhost" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.723 [INFO][3729] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77 Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.734 [INFO][3729] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" host="localhost" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.740 [INFO][3729] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" host="localhost" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.740 [INFO][3729] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" host="localhost" Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.741 [INFO][3729] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:26.769468 env[1206]: 2025-07-15 11:31:26.741 [INFO][3729] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" HandleID="k8s-pod-network.2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.770171 env[1206]: 2025-07-15 11:31:26.743 [INFO][3703] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-vwl5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0", GenerateName:"calico-apiserver-f9f8586f4-", Namespace:"calico-apiserver", SelfLink:"", UID:"d07f2c58-b78d-4a49-8177-494f02e5ce78", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f9f8586f4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-f9f8586f4-vwl5f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali13ca3ced966", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:26.770171 env[1206]: 2025-07-15 11:31:26.743 [INFO][3703] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-vwl5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.770171 env[1206]: 2025-07-15 11:31:26.743 [INFO][3703] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali13ca3ced966 ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-vwl5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.770171 env[1206]: 2025-07-15 11:31:26.754 [INFO][3703] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-vwl5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.770171 env[1206]: 2025-07-15 11:31:26.754 [INFO][3703] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-vwl5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0", GenerateName:"calico-apiserver-f9f8586f4-", Namespace:"calico-apiserver", SelfLink:"", UID:"d07f2c58-b78d-4a49-8177-494f02e5ce78", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f9f8586f4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77", Pod:"calico-apiserver-f9f8586f4-vwl5f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali13ca3ced966", MAC:"ca:a3:83:ca:af:84", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:26.770171 env[1206]: 2025-07-15 11:31:26.767 [INFO][3703] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-vwl5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:26.771033 env[1206]: time="2025-07-15T11:31:26.770998409Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-v8rh7,Uid:71dab566-ad70-43d5-83cf-f9e5d62752a1,Namespace:kube-system,Attempt:1,} returns sandbox id \"0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6\"" Jul 15 11:31:26.772358 kubelet[1962]: E0715 11:31:26.771901 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:26.781988 env[1206]: time="2025-07-15T11:31:26.781945132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-fss4l,Uid:5bc46ac2-129e-430f-97e3-3a35e48aec97,Namespace:calico-system,Attempt:1,} returns sandbox id \"f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2\"" Jul 15 11:31:26.783279 env[1206]: time="2025-07-15T11:31:26.783226588Z" level=info msg="CreateContainer within sandbox \"0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:31:26.784292 env[1206]: time="2025-07-15T11:31:26.784254987Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:31:26.789466 env[1206]: time="2025-07-15T11:31:26.789409651Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:26.789540 env[1206]: time="2025-07-15T11:31:26.789452542Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:26.789540 env[1206]: time="2025-07-15T11:31:26.789476446Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:26.789736 env[1206]: time="2025-07-15T11:31:26.789612221Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77 pid=3910 runtime=io.containerd.runc.v2 Jul 15 11:31:26.800438 systemd[1]: Started cri-containerd-2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77.scope. Jul 15 11:31:26.806415 env[1206]: time="2025-07-15T11:31:26.806371352Z" level=info msg="CreateContainer within sandbox \"0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"e3a6256944decc9c31632557aff2557235782bda5c92ad33b0a1ff564ac92385\"" Jul 15 11:31:26.807121 env[1206]: time="2025-07-15T11:31:26.807085482Z" level=info msg="StartContainer for \"e3a6256944decc9c31632557aff2557235782bda5c92ad33b0a1ff564ac92385\"" Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.817000 audit: BPF prog-id=168 op=LOAD Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3910 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383665346236643036623961656533633437373562393566376339 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3910 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383665346236643036623961656533633437373562393566376339 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit: BPF prog-id=169 op=LOAD Jul 15 11:31:26.818000 audit[3922]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003d0c30 items=0 ppid=3910 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383665346236643036623961656533633437373562393566376339 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit: BPF prog-id=170 op=LOAD Jul 15 11:31:26.818000 audit[3922]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003d0c78 items=0 ppid=3910 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383665346236643036623961656533633437373562393566376339 Jul 15 11:31:26.818000 audit: BPF prog-id=170 op=UNLOAD Jul 15 11:31:26.818000 audit: BPF prog-id=169 op=UNLOAD Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { perfmon } for pid=3922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit[3922]: AVC avc: denied { bpf } for pid=3922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.818000 audit: BPF prog-id=171 op=LOAD Jul 15 11:31:26.818000 audit[3922]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d1088 items=0 ppid=3910 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383665346236643036623961656533633437373562393566376339 Jul 15 11:31:26.822008 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:31:26.827236 systemd[1]: Started cri-containerd-e3a6256944decc9c31632557aff2557235782bda5c92ad33b0a1ff564ac92385.scope. Jul 15 11:31:26.835265 systemd-networkd[1030]: calia59bbf32207: Link UP Jul 15 11:31:26.836935 systemd-networkd[1030]: calia59bbf32207: Gained carrier Jul 15 11:31:26.837733 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia59bbf32207: link becomes ready Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit: BPF prog-id=172 op=LOAD Jul 15 11:31:26.847000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc3cce1720 a2=94 a3=1 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.847000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.847000 audit: BPF prog-id=172 op=UNLOAD Jul 15 11:31:26.847000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.847000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc3cce17f0 a2=50 a3=7ffc3cce18d0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.847000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.851000 audit: BPF prog-id=173 op=LOAD Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=3787 pid=3947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533613632353639343464656363396333313633323535376166663235 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=3787 pid=3947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533613632353639343464656363396333313633323535376166663235 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit: BPF prog-id=174 op=LOAD Jul 15 11:31:26.852000 audit[3947]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0003083a0 items=0 ppid=3787 pid=3947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533613632353639343464656363396333313633323535376166663235 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit: BPF prog-id=175 op=LOAD Jul 15 11:31:26.852000 audit[3947]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0003083e8 items=0 ppid=3787 pid=3947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533613632353639343464656363396333313633323535376166663235 Jul 15 11:31:26.852000 audit: BPF prog-id=175 op=UNLOAD Jul 15 11:31:26.852000 audit: BPF prog-id=174 op=UNLOAD Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { perfmon } for pid=3947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit[3947]: AVC avc: denied { bpf } for pid=3947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.852000 audit: BPF prog-id=176 op=LOAD Jul 15 11:31:26.852000 audit[3947]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0003087f8 items=0 ppid=3787 pid=3947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533613632353639343464656363396333313633323535376166663235 Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.667 [INFO][3756] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0 whisker-6d94f7df8f- calico-system f7d9e08d-02b7-4765-bc78-c54a12a2591e 1045 0 2025-07-15 11:31:25 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:6d94f7df8f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-6d94f7df8f-7ndfv eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calia59bbf32207 [] [] }} ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Namespace="calico-system" Pod="whisker-6d94f7df8f-7ndfv" WorkloadEndpoint="localhost-k8s-whisker--6d94f7df8f--7ndfv-" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.667 [INFO][3756] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Namespace="calico-system" Pod="whisker-6d94f7df8f-7ndfv" WorkloadEndpoint="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.725 [INFO][3842] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" HandleID="k8s-pod-network.2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Workload="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.726 [INFO][3842] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" HandleID="k8s-pod-network.2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Workload="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002e2140), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-6d94f7df8f-7ndfv", "timestamp":"2025-07-15 11:31:26.725712664 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.726 [INFO][3842] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.741 [INFO][3842] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.741 [INFO][3842] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.795 [INFO][3842] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" host="localhost" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.811 [INFO][3842] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.816 [INFO][3842] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.817 [INFO][3842] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.819 [INFO][3842] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.819 [INFO][3842] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" host="localhost" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.820 [INFO][3842] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.823 [INFO][3842] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" host="localhost" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.830 [INFO][3842] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" host="localhost" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.830 [INFO][3842] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" host="localhost" Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.830 [INFO][3842] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:26.855230 env[1206]: 2025-07-15 11:31:26.830 [INFO][3842] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" HandleID="k8s-pod-network.2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Workload="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" Jul 15 11:31:26.855830 env[1206]: 2025-07-15 11:31:26.832 [INFO][3756] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Namespace="calico-system" Pod="whisker-6d94f7df8f-7ndfv" WorkloadEndpoint="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0", GenerateName:"whisker-6d94f7df8f-", Namespace:"calico-system", SelfLink:"", UID:"f7d9e08d-02b7-4765-bc78-c54a12a2591e", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6d94f7df8f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-6d94f7df8f-7ndfv", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia59bbf32207", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:26.855830 env[1206]: 2025-07-15 11:31:26.832 [INFO][3756] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Namespace="calico-system" Pod="whisker-6d94f7df8f-7ndfv" WorkloadEndpoint="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" Jul 15 11:31:26.855830 env[1206]: 2025-07-15 11:31:26.832 [INFO][3756] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia59bbf32207 ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Namespace="calico-system" Pod="whisker-6d94f7df8f-7ndfv" WorkloadEndpoint="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" Jul 15 11:31:26.855830 env[1206]: 2025-07-15 11:31:26.836 [INFO][3756] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Namespace="calico-system" Pod="whisker-6d94f7df8f-7ndfv" WorkloadEndpoint="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" Jul 15 11:31:26.855830 env[1206]: 2025-07-15 11:31:26.837 [INFO][3756] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Namespace="calico-system" Pod="whisker-6d94f7df8f-7ndfv" WorkloadEndpoint="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0", GenerateName:"whisker-6d94f7df8f-", Namespace:"calico-system", SelfLink:"", UID:"f7d9e08d-02b7-4765-bc78-c54a12a2591e", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6d94f7df8f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d", Pod:"whisker-6d94f7df8f-7ndfv", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia59bbf32207", MAC:"8a:53:5e:a4:33:4d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:26.855830 env[1206]: 2025-07-15 11:31:26.849 [INFO][3756] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d" Namespace="calico-system" Pod="whisker-6d94f7df8f-7ndfv" WorkloadEndpoint="localhost-k8s-whisker--6d94f7df8f--7ndfv-eth0" Jul 15 11:31:26.858898 env[1206]: time="2025-07-15T11:31:26.858868812Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f9f8586f4-vwl5f,Uid:d07f2c58-b78d-4a49-8177-494f02e5ce78,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77\"" Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc3cce1730 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc3cce1760 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc3cce1670 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc3cce1780 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc3cce1760 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc3cce1750 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc3cce1780 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc3cce1760 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc3cce1780 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc3cce1750 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.859000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.859000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc3cce17c0 a2=28 a3=0 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc3cce1570 a2=50 a3=1 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.861000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit: BPF prog-id=177 op=LOAD Jul 15 11:31:26.861000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc3cce1570 a2=94 a3=5 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.861000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.861000 audit: BPF prog-id=177 op=UNLOAD Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc3cce1620 a2=50 a3=1 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.861000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc3cce1740 a2=4 a3=38 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.861000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.861000 audit[3858]: AVC avc: denied { confidentiality } for pid=3858 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:31:26.861000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc3cce1790 a2=94 a3=6 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.861000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.862000 audit[3858]: AVC avc: denied { confidentiality } for pid=3858 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:31:26.862000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc3cce0f40 a2=94 a3=88 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.862000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { confidentiality } for pid=3858 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:31:26.864000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc3cce0f40 a2=94 a3=88 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.864000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc3cce2970 a2=10 a3=208 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.864000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc3cce2810 a2=10 a3=3 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.864000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc3cce27b0 a2=10 a3=3 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.864000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.864000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.864000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc3cce27b0 a2=10 a3=7 items=0 ppid=3538 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.864000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:31:26.871022 env[1206]: time="2025-07-15T11:31:26.870983206Z" level=info msg="StartContainer for \"e3a6256944decc9c31632557aff2557235782bda5c92ad33b0a1ff564ac92385\" returns successfully" Jul 15 11:31:26.871000 audit: BPF prog-id=156 op=UNLOAD Jul 15 11:31:26.876238 env[1206]: time="2025-07-15T11:31:26.875818641Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:26.876238 env[1206]: time="2025-07-15T11:31:26.875878273Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:26.876238 env[1206]: time="2025-07-15T11:31:26.875888933Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:26.876238 env[1206]: time="2025-07-15T11:31:26.876097524Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d pid=3991 runtime=io.containerd.runc.v2 Jul 15 11:31:26.888873 systemd[1]: Started cri-containerd-2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d.scope. Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.906000 audit: BPF prog-id=178 op=LOAD Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3991 pid=4003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266663539353061336334383537386238666332623130616639363538 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3991 pid=4003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266663539353061336334383537386238666332623130616639363538 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.907000 audit: BPF prog-id=179 op=LOAD Jul 15 11:31:26.907000 audit[4003]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00035cf80 items=0 ppid=3991 pid=4003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266663539353061336334383537386238666332623130616639363538 Jul 15 11:31:26.908000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.908000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.908000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.908000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.908000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.908000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.908000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.908000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.908000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.908000 audit: BPF prog-id=180 op=LOAD Jul 15 11:31:26.908000 audit[4003]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00035cfc8 items=0 ppid=3991 pid=4003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266663539353061336334383537386238666332623130616639363538 Jul 15 11:31:26.909000 audit: BPF prog-id=180 op=UNLOAD Jul 15 11:31:26.909000 audit: BPF prog-id=179 op=UNLOAD Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.909000 audit: BPF prog-id=181 op=LOAD Jul 15 11:31:26.909000 audit[4003]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00035d3d8 items=0 ppid=3991 pid=4003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266663539353061336334383537386238666332623130616639363538 Jul 15 11:31:26.911623 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:31:26.915000 audit[3957]: AVC avc: denied { getattr } for pid=3957 comm="coredns" path="cgroup:[4026532767]" dev="nsfs" ino=4026532767 scontext=system_u:system_r:svirt_lxc_net_t:s0:c773,c993 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:31:26.915000 audit[3957]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa08 a2=c0004ee9f8 a3=0 items=0 ppid=3787 pid=3957 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c773,c993 key=(null) Jul 15 11:31:26.915000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:31:26.931000 audit[4048]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=4048 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:31:26.931000 audit[4048]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffd41f99af0 a2=0 a3=7ffd41f99adc items=0 ppid=3538 pid=4048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.931000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:31:26.936833 env[1206]: time="2025-07-15T11:31:26.936746280Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6d94f7df8f-7ndfv,Uid:f7d9e08d-02b7-4765-bc78-c54a12a2591e,Namespace:calico-system,Attempt:0,} returns sandbox id \"2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d\"" Jul 15 11:31:26.943000 audit[4046]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=4046 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:31:26.943000 audit[4046]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffcf1d97360 a2=0 a3=7ffcf1d9734c items=0 ppid=3538 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.943000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:31:26.954000 audit[4047]: NETFILTER_CFG table=nat:103 family=2 entries=15 op=nft_register_chain pid=4047 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:31:26.954000 audit[4047]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffe53588db0 a2=0 a3=7ffe53588d9c items=0 ppid=3538 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.954000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:31:26.954000 audit[4050]: NETFILTER_CFG table=filter:104 family=2 entries=73 op=nft_register_chain pid=4050 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:31:26.954000 audit[4050]: SYSCALL arch=c000003e syscall=46 success=yes exit=38620 a0=3 a1=7ffffe7996b0 a2=0 a3=557551462000 items=0 ppid=3538 pid=4050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.954000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:31:26.986299 env[1206]: time="2025-07-15T11:31:26.986266512Z" level=info msg="StopPodSandbox for \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\"" Jul 15 11:31:26.986876 env[1206]: time="2025-07-15T11:31:26.986485864Z" level=info msg="StopPodSandbox for \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\"" Jul 15 11:31:26.990000 audit[4071]: NETFILTER_CFG table=filter:105 family=2 entries=141 op=nft_register_chain pid=4071 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:31:26.990000 audit[4071]: SYSCALL arch=c000003e syscall=46 success=yes exit=84636 a0=3 a1=7ffccb0e5010 a2=0 a3=7ffccb0e4ffc items=0 ppid=3538 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.990000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.036 [INFO][4092] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.037 [INFO][4092] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" iface="eth0" netns="/var/run/netns/cni-477a222a-cfd4-7968-a5c5-3124e038a140" Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.037 [INFO][4092] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" iface="eth0" netns="/var/run/netns/cni-477a222a-cfd4-7968-a5c5-3124e038a140" Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.037 [INFO][4092] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" iface="eth0" netns="/var/run/netns/cni-477a222a-cfd4-7968-a5c5-3124e038a140" Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.037 [INFO][4092] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.037 [INFO][4092] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.055 [INFO][4110] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" HandleID="k8s-pod-network.089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.055 [INFO][4110] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.055 [INFO][4110] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.061 [WARNING][4110] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" HandleID="k8s-pod-network.089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.061 [INFO][4110] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" HandleID="k8s-pod-network.089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.064 [INFO][4110] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:27.068701 env[1206]: 2025-07-15 11:31:27.066 [INFO][4092] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:27.069301 env[1206]: time="2025-07-15T11:31:27.069271648Z" level=info msg="TearDown network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\" successfully" Jul 15 11:31:27.069397 env[1206]: time="2025-07-15T11:31:27.069361075Z" level=info msg="StopPodSandbox for \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\" returns successfully" Jul 15 11:31:27.069966 kubelet[1962]: E0715 11:31:27.069734 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:27.070343 env[1206]: time="2025-07-15T11:31:27.070275130Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-k9t6m,Uid:2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6,Namespace:kube-system,Attempt:1,}" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.034 [INFO][4091] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.034 [INFO][4091] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" iface="eth0" netns="/var/run/netns/cni-96945668-71b2-dfc6-10ae-e4a35c05b561" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.034 [INFO][4091] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" iface="eth0" netns="/var/run/netns/cni-96945668-71b2-dfc6-10ae-e4a35c05b561" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.035 [INFO][4091] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" iface="eth0" netns="/var/run/netns/cni-96945668-71b2-dfc6-10ae-e4a35c05b561" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.035 [INFO][4091] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.035 [INFO][4091] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.061 [INFO][4108] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" HandleID="k8s-pod-network.f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.062 [INFO][4108] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.064 [INFO][4108] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.070 [WARNING][4108] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" HandleID="k8s-pod-network.f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.070 [INFO][4108] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" HandleID="k8s-pod-network.f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.072 [INFO][4108] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:27.075500 env[1206]: 2025-07-15 11:31:27.073 [INFO][4091] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:27.075876 env[1206]: time="2025-07-15T11:31:27.075605402Z" level=info msg="TearDown network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\" successfully" Jul 15 11:31:27.075876 env[1206]: time="2025-07-15T11:31:27.075628697Z" level=info msg="StopPodSandbox for \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\" returns successfully" Jul 15 11:31:27.076211 env[1206]: time="2025-07-15T11:31:27.076168669Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f9f8586f4-wxd59,Uid:1c2b5616-5ace-4ead-8736-0b037583204d,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:31:27.181068 systemd-networkd[1030]: calid605430c165: Link UP Jul 15 11:31:27.182518 systemd-networkd[1030]: calid605430c165: Gained carrier Jul 15 11:31:27.182705 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid605430c165: link becomes ready Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.122 [INFO][4125] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0 coredns-674b8bbfcf- kube-system 2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6 1079 0 2025-07-15 11:30:45 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-k9t6m eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calid605430c165 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Namespace="kube-system" Pod="coredns-674b8bbfcf-k9t6m" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--k9t6m-" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.122 [INFO][4125] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Namespace="kube-system" Pod="coredns-674b8bbfcf-k9t6m" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.144 [INFO][4155] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" HandleID="k8s-pod-network.44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.145 [INFO][4155] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" HandleID="k8s-pod-network.44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c8fe0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-k9t6m", "timestamp":"2025-07-15 11:31:27.1449069 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.145 [INFO][4155] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.145 [INFO][4155] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.145 [INFO][4155] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.151 [INFO][4155] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" host="localhost" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.155 [INFO][4155] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.160 [INFO][4155] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.161 [INFO][4155] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.164 [INFO][4155] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.165 [INFO][4155] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" host="localhost" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.168 [INFO][4155] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9 Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.171 [INFO][4155] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" host="localhost" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.176 [INFO][4155] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" host="localhost" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.177 [INFO][4155] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" host="localhost" Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.177 [INFO][4155] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:27.203325 env[1206]: 2025-07-15 11:31:27.177 [INFO][4155] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" HandleID="k8s-pod-network.44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.204022 env[1206]: 2025-07-15 11:31:27.179 [INFO][4125] cni-plugin/k8s.go 418: Populated endpoint ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Namespace="kube-system" Pod="coredns-674b8bbfcf-k9t6m" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-k9t6m", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid605430c165", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:27.204022 env[1206]: 2025-07-15 11:31:27.179 [INFO][4125] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Namespace="kube-system" Pod="coredns-674b8bbfcf-k9t6m" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.204022 env[1206]: 2025-07-15 11:31:27.179 [INFO][4125] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid605430c165 ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Namespace="kube-system" Pod="coredns-674b8bbfcf-k9t6m" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.204022 env[1206]: 2025-07-15 11:31:27.184 [INFO][4125] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Namespace="kube-system" Pod="coredns-674b8bbfcf-k9t6m" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.204022 env[1206]: 2025-07-15 11:31:27.184 [INFO][4125] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Namespace="kube-system" Pod="coredns-674b8bbfcf-k9t6m" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9", Pod:"coredns-674b8bbfcf-k9t6m", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid605430c165", MAC:"92:02:5d:af:9a:89", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:27.204022 env[1206]: 2025-07-15 11:31:27.199 [INFO][4125] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9" Namespace="kube-system" Pod="coredns-674b8bbfcf-k9t6m" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:27.207000 audit[4180]: NETFILTER_CFG table=filter:106 family=2 entries=44 op=nft_register_chain pid=4180 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:31:27.207000 audit[4180]: SYSCALL arch=c000003e syscall=46 success=yes exit=21532 a0=3 a1=7ffc9ff5a370 a2=0 a3=7ffc9ff5a35c items=0 ppid=3538 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.207000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:31:27.213546 env[1206]: time="2025-07-15T11:31:27.213469601Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:27.213741 env[1206]: time="2025-07-15T11:31:27.213533581Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:27.213741 env[1206]: time="2025-07-15T11:31:27.213544422Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:27.214095 env[1206]: time="2025-07-15T11:31:27.213815381Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9 pid=4188 runtime=io.containerd.runc.v2 Jul 15 11:31:27.222158 kubelet[1962]: E0715 11:31:27.221922 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:27.226569 systemd[1]: Started cri-containerd-44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9.scope. Jul 15 11:31:27.241395 systemd[1]: run-netns-cni\x2d96945668\x2d71b2\x2ddfc6\x2d10ae\x2de4a35c05b561.mount: Deactivated successfully. Jul 15 11:31:27.241492 systemd[1]: run-netns-cni\x2df300f181\x2daa5a\x2d3a46\x2d8ddc\x2d97caf6e23c48.mount: Deactivated successfully. Jul 15 11:31:27.241535 systemd[1]: run-netns-cni\x2d477a222a\x2dcfd4\x2d7968\x2da5c5\x2d3124e038a140.mount: Deactivated successfully. Jul 15 11:31:27.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.256000 audit: BPF prog-id=182 op=LOAD Jul 15 11:31:27.257500 kubelet[1962]: I0715 11:31:27.257212 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-v8rh7" podStartSLOduration=42.257198561 podStartE2EDuration="42.257198561s" podCreationTimestamp="2025-07-15 11:30:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:31:27.234562513 +0000 UTC m=+47.345809952" watchObservedRunningTime="2025-07-15 11:31:27.257198561 +0000 UTC m=+47.368446010" Jul 15 11:31:27.258000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.258000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4188 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633236336237653034636164663930343335643135653235663665 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4188 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633236336237653034636164663930343335643135653235663665 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.261000 audit: BPF prog-id=183 op=LOAD Jul 15 11:31:27.261000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000309700 items=0 ppid=4188 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633236336237653034636164663930343335643135653235663665 Jul 15 11:31:27.262000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.262000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.262000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.262000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.262000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.262000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.262000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.262000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.262000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.262000 audit: BPF prog-id=184 op=LOAD Jul 15 11:31:27.262000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000309748 items=0 ppid=4188 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633236336237653034636164663930343335643135653235663665 Jul 15 11:31:27.263000 audit: BPF prog-id=184 op=UNLOAD Jul 15 11:31:27.263000 audit: BPF prog-id=183 op=UNLOAD Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.263000 audit: BPF prog-id=185 op=LOAD Jul 15 11:31:27.263000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000309b58 items=0 ppid=4188 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633236336237653034636164663930343335643135653235663665 Jul 15 11:31:27.265964 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:31:27.267000 audit[4216]: NETFILTER_CFG table=filter:107 family=2 entries=20 op=nft_register_rule pid=4216 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:27.267000 audit[4216]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff512567a0 a2=0 a3=7fff5125678c items=0 ppid=2149 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.267000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:27.271000 audit[4216]: NETFILTER_CFG table=nat:108 family=2 entries=14 op=nft_register_rule pid=4216 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:27.271000 audit[4216]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fff512567a0 a2=0 a3=0 items=0 ppid=2149 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.271000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:27.292992 systemd-networkd[1030]: cali8b0918e6f86: Link UP Jul 15 11:31:27.294320 env[1206]: time="2025-07-15T11:31:27.294269106Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-k9t6m,Uid:2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6,Namespace:kube-system,Attempt:1,} returns sandbox id \"44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9\"" Jul 15 11:31:27.294955 systemd-networkd[1030]: cali8b0918e6f86: Gained carrier Jul 15 11:31:27.295361 kubelet[1962]: E0715 11:31:27.295164 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:27.295718 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8b0918e6f86: link becomes ready Jul 15 11:31:27.294000 audit[4225]: NETFILTER_CFG table=filter:109 family=2 entries=17 op=nft_register_rule pid=4225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:27.294000 audit[4225]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe635513e0 a2=0 a3=7ffe635513cc items=0 ppid=2149 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.294000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:27.301000 audit[4225]: NETFILTER_CFG table=nat:110 family=2 entries=35 op=nft_register_chain pid=4225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:27.301000 audit[4225]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe635513e0 a2=0 a3=7ffe635513cc items=0 ppid=2149 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.301000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:27.305237 env[1206]: time="2025-07-15T11:31:27.305198025Z" level=info msg="CreateContainer within sandbox \"44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.125 [INFO][4135] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0 calico-apiserver-f9f8586f4- calico-apiserver 1c2b5616-5ace-4ead-8736-0b037583204d 1078 0 2025-07-15 11:30:58 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:f9f8586f4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-f9f8586f4-wxd59 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8b0918e6f86 [] [] }} ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-wxd59" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.125 [INFO][4135] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-wxd59" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.147 [INFO][4161] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" HandleID="k8s-pod-network.9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.147 [INFO][4161] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" HandleID="k8s-pod-network.9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9270), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-f9f8586f4-wxd59", "timestamp":"2025-07-15 11:31:27.147425457 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.147 [INFO][4161] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.177 [INFO][4161] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.177 [INFO][4161] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.252 [INFO][4161] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" host="localhost" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.265 [INFO][4161] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.273 [INFO][4161] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.274 [INFO][4161] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.275 [INFO][4161] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.275 [INFO][4161] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" host="localhost" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.276 [INFO][4161] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.279 [INFO][4161] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" host="localhost" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.285 [INFO][4161] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" host="localhost" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.285 [INFO][4161] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" host="localhost" Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.286 [INFO][4161] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:27.309448 env[1206]: 2025-07-15 11:31:27.286 [INFO][4161] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" HandleID="k8s-pod-network.9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.310243 env[1206]: 2025-07-15 11:31:27.288 [INFO][4135] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-wxd59" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0", GenerateName:"calico-apiserver-f9f8586f4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1c2b5616-5ace-4ead-8736-0b037583204d", ResourceVersion:"1078", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f9f8586f4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-f9f8586f4-wxd59", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b0918e6f86", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:27.310243 env[1206]: 2025-07-15 11:31:27.288 [INFO][4135] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-wxd59" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.310243 env[1206]: 2025-07-15 11:31:27.288 [INFO][4135] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8b0918e6f86 ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-wxd59" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.310243 env[1206]: 2025-07-15 11:31:27.295 [INFO][4135] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-wxd59" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.310243 env[1206]: 2025-07-15 11:31:27.298 [INFO][4135] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-wxd59" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0", GenerateName:"calico-apiserver-f9f8586f4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1c2b5616-5ace-4ead-8736-0b037583204d", ResourceVersion:"1078", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f9f8586f4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b", Pod:"calico-apiserver-f9f8586f4-wxd59", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b0918e6f86", MAC:"b2:20:be:7d:ad:87", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:27.310243 env[1206]: 2025-07-15 11:31:27.307 [INFO][4135] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b" Namespace="calico-apiserver" Pod="calico-apiserver-f9f8586f4-wxd59" WorkloadEndpoint="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:27.321822 env[1206]: time="2025-07-15T11:31:27.321764512Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:27.321822 env[1206]: time="2025-07-15T11:31:27.321801010Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:27.322117 env[1206]: time="2025-07-15T11:31:27.322007799Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:27.322270 env[1206]: time="2025-07-15T11:31:27.322231188Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b pid=4239 runtime=io.containerd.runc.v2 Jul 15 11:31:27.322000 audit[4245]: NETFILTER_CFG table=filter:111 family=2 entries=53 op=nft_register_chain pid=4245 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:31:27.322000 audit[4245]: SYSCALL arch=c000003e syscall=46 success=yes exit=26640 a0=3 a1=7ffc7ecbfdf0 a2=0 a3=7ffc7ecbfddc items=0 ppid=3538 pid=4245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.322000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:31:27.332003 env[1206]: time="2025-07-15T11:31:27.328864395Z" level=info msg="CreateContainer within sandbox \"44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"4cf3aa39dbf46515b1f82c7e0e3ce893eb91c9c0822f293c298c6e4cc0201083\"" Jul 15 11:31:27.332003 env[1206]: time="2025-07-15T11:31:27.329591610Z" level=info msg="StartContainer for \"4cf3aa39dbf46515b1f82c7e0e3ce893eb91c9c0822f293c298c6e4cc0201083\"" Jul 15 11:31:27.332974 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2102917627.mount: Deactivated successfully. Jul 15 11:31:27.337658 systemd[1]: Started cri-containerd-9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b.scope. Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit: BPF prog-id=186 op=LOAD Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4239 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966343661346632623665613839363434626439346365646331303239 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=4239 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966343661346632623665613839363434626439346365646331303239 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit: BPF prog-id=187 op=LOAD Jul 15 11:31:27.350000 audit[4250]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00025ddf0 items=0 ppid=4239 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966343661346632623665613839363434626439346365646331303239 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.350000 audit: BPF prog-id=188 op=LOAD Jul 15 11:31:27.350000 audit[4250]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00025de38 items=0 ppid=4239 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966343661346632623665613839363434626439346365646331303239 Jul 15 11:31:27.351000 audit: BPF prog-id=188 op=UNLOAD Jul 15 11:31:27.351000 audit: BPF prog-id=187 op=UNLOAD Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { perfmon } for pid=4250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit[4250]: AVC avc: denied { bpf } for pid=4250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.351000 audit: BPF prog-id=189 op=LOAD Jul 15 11:31:27.351000 audit[4250]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003c4248 items=0 ppid=4239 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966343661346632623665613839363434626439346365646331303239 Jul 15 11:31:27.352644 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:31:27.352662 systemd[1]: Started cri-containerd-4cf3aa39dbf46515b1f82c7e0e3ce893eb91c9c0822f293c298c6e4cc0201083.scope. Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.363000 audit: BPF prog-id=190 op=LOAD Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4188 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663361613339646266343635313562316638326337653065336365 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4188 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663361613339646266343635313562316638326337653065336365 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit: BPF prog-id=191 op=LOAD Jul 15 11:31:27.364000 audit[4271]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002e3de0 items=0 ppid=4188 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663361613339646266343635313562316638326337653065336365 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.364000 audit: BPF prog-id=192 op=LOAD Jul 15 11:31:27.364000 audit[4271]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002e3e28 items=0 ppid=4188 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663361613339646266343635313562316638326337653065336365 Jul 15 11:31:27.365000 audit: BPF prog-id=192 op=UNLOAD Jul 15 11:31:27.365000 audit: BPF prog-id=191 op=UNLOAD Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:27.365000 audit: BPF prog-id=193 op=LOAD Jul 15 11:31:27.365000 audit[4271]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a4238 items=0 ppid=4188 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:27.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663361613339646266343635313562316638326337653065336365 Jul 15 11:31:27.379069 env[1206]: time="2025-07-15T11:31:27.379000999Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f9f8586f4-wxd59,Uid:1c2b5616-5ace-4ead-8736-0b037583204d,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b\"" Jul 15 11:31:27.382853 env[1206]: time="2025-07-15T11:31:27.381058520Z" level=info msg="StartContainer for \"4cf3aa39dbf46515b1f82c7e0e3ce893eb91c9c0822f293c298c6e4cc0201083\" returns successfully" Jul 15 11:31:27.393000 audit[4283]: AVC avc: denied { getattr } for pid=4283 comm="coredns" path="cgroup:[4026532639]" dev="nsfs" ino=4026532639 scontext=system_u:system_r:svirt_lxc_net_t:s0:c569,c700 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:31:27.393000 audit[4283]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00015e9a8 a2=c0004b76f8 a3=0 items=0 ppid=4188 pid=4283 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c569,c700 key=(null) Jul 15 11:31:27.393000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:31:27.914890 systemd-networkd[1030]: cali7a72723608f: Gained IPv6LL Jul 15 11:31:27.978891 systemd-networkd[1030]: cali13ca3ced966: Gained IPv6LL Jul 15 11:31:28.043496 systemd-networkd[1030]: calia59bbf32207: Gained IPv6LL Jul 15 11:31:28.232817 kubelet[1962]: E0715 11:31:28.232490 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:28.234813 systemd-networkd[1030]: calif45cab70762: Gained IPv6LL Jul 15 11:31:28.236665 kubelet[1962]: E0715 11:31:28.236570 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:28.247107 kubelet[1962]: I0715 11:31:28.246913 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-k9t6m" podStartSLOduration=43.246897033 podStartE2EDuration="43.246897033s" podCreationTimestamp="2025-07-15 11:30:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:31:28.243660259 +0000 UTC m=+48.354907719" watchObservedRunningTime="2025-07-15 11:31:28.246897033 +0000 UTC m=+48.358144482" Jul 15 11:31:28.261000 audit[4314]: NETFILTER_CFG table=filter:112 family=2 entries=14 op=nft_register_rule pid=4314 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:28.261000 audit[4314]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe8731bdc0 a2=0 a3=7ffe8731bdac items=0 ppid=2149 pid=4314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:28.261000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:28.271000 audit[4314]: NETFILTER_CFG table=nat:113 family=2 entries=44 op=nft_register_rule pid=4314 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:28.271000 audit[4314]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe8731bdc0 a2=0 a3=7ffe8731bdac items=0 ppid=2149 pid=4314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:28.271000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:28.298855 systemd-networkd[1030]: calid605430c165: Gained IPv6LL Jul 15 11:31:28.491161 systemd-networkd[1030]: vxlan.calico: Gained IPv6LL Jul 15 11:31:28.986483 env[1206]: time="2025-07-15T11:31:28.986446461Z" level=info msg="StopPodSandbox for \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\"" Jul 15 11:31:28.987180 env[1206]: time="2025-07-15T11:31:28.986581506Z" level=info msg="StopPodSandbox for \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\"" Jul 15 11:31:29.014899 systemd-networkd[1030]: cali8b0918e6f86: Gained IPv6LL Jul 15 11:31:29.237995 kubelet[1962]: E0715 11:31:29.237889 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:29.238363 kubelet[1962]: E0715 11:31:29.238053 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:29.358000 audit[4358]: NETFILTER_CFG table=filter:114 family=2 entries=14 op=nft_register_rule pid=4358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:29.358000 audit[4358]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd053c5560 a2=0 a3=7ffd053c554c items=0 ppid=2149 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:29.358000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:29.373000 audit[4358]: NETFILTER_CFG table=nat:115 family=2 entries=56 op=nft_register_chain pid=4358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:29.373000 audit[4358]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd053c5560 a2=0 a3=7ffd053c554c items=0 ppid=2149 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:29.373000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:29.619460 systemd[1]: Started sshd@9-10.0.0.56:22-10.0.0.1:47970.service. Jul 15 11:31:29.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.56:22-10.0.0.1:47970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:29.621486 kernel: kauditd_printk_skb: 1053 callbacks suppressed Jul 15 11:31:29.621561 kernel: audit: type=1130 audit(1752579089.618:1308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.56:22-10.0.0.1:47970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:29.654000 audit[4361]: USER_ACCT pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:29.655191 sshd[4361]: Accepted publickey for core from 10.0.0.1 port 47970 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:29.658000 audit[4361]: CRED_ACQ pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:29.659345 sshd[4361]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:29.662478 kernel: audit: type=1101 audit(1752579089.654:1309): pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:29.662565 kernel: audit: type=1103 audit(1752579089.658:1310): pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:29.662645 kernel: audit: type=1006 audit(1752579089.658:1311): pid=4361 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 15 11:31:29.663797 systemd[1]: Started session-10.scope. Jul 15 11:31:29.664014 systemd-logind[1193]: New session 10 of user core. Jul 15 11:31:29.658000 audit[4361]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbee812d0 a2=3 a3=0 items=0 ppid=1 pid=4361 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:29.668531 kernel: audit: type=1300 audit(1752579089.658:1311): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbee812d0 a2=3 a3=0 items=0 ppid=1 pid=4361 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:29.668582 kernel: audit: type=1327 audit(1752579089.658:1311): proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:29.658000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:29.667000 audit[4361]: USER_START pid=4361 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:29.673971 kernel: audit: type=1105 audit(1752579089.667:1312): pid=4361 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:29.674025 kernel: audit: type=1103 audit(1752579089.669:1313): pid=4363 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:29.669000 audit[4363]: CRED_ACQ pid=4363 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:30.239342 kubelet[1962]: E0715 11:31:30.239304 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:29.746 [INFO][4342] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:29.746 [INFO][4342] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" iface="eth0" netns="/var/run/netns/cni-1013d680-4a7f-c0a3-f4ea-1b8f7bd8eb0b" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:29.747 [INFO][4342] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" iface="eth0" netns="/var/run/netns/cni-1013d680-4a7f-c0a3-f4ea-1b8f7bd8eb0b" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:29.747 [INFO][4342] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" iface="eth0" netns="/var/run/netns/cni-1013d680-4a7f-c0a3-f4ea-1b8f7bd8eb0b" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:29.747 [INFO][4342] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:29.747 [INFO][4342] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:29.776 [INFO][4374] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" HandleID="k8s-pod-network.35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:29.776 [INFO][4374] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:29.776 [INFO][4374] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:30.152 [WARNING][4374] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" HandleID="k8s-pod-network.35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:30.152 [INFO][4374] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" HandleID="k8s-pod-network.35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:30.456 [INFO][4374] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:30.461374 env[1206]: 2025-07-15 11:31:30.459 [INFO][4342] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:30.464149 systemd[1]: run-netns-cni\x2d1013d680\x2d4a7f\x2dc0a3\x2df4ea\x2d1b8f7bd8eb0b.mount: Deactivated successfully. Jul 15 11:31:30.465518 env[1206]: time="2025-07-15T11:31:30.465451259Z" level=info msg="TearDown network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\" successfully" Jul 15 11:31:30.465518 env[1206]: time="2025-07-15T11:31:30.465505481Z" level=info msg="StopPodSandbox for \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\" returns successfully" Jul 15 11:31:30.466393 env[1206]: time="2025-07-15T11:31:30.466294351Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hnmdh,Uid:b2372bb1-56e8-428a-9553-632abd324bfd,Namespace:calico-system,Attempt:1,}" Jul 15 11:31:30.470963 sshd[4361]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:30.471000 audit[4361]: USER_END pid=4361 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:30.473250 systemd[1]: sshd@9-10.0.0.56:22-10.0.0.1:47970.service: Deactivated successfully. Jul 15 11:31:30.473849 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:31:30.474500 systemd-logind[1193]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:31:30.475423 systemd-logind[1193]: Removed session 10. Jul 15 11:31:30.479482 kernel: audit: type=1106 audit(1752579090.471:1314): pid=4361 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:30.479549 kernel: audit: type=1104 audit(1752579090.471:1315): pid=4361 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:30.471000 audit[4361]: CRED_DISP pid=4361 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:30.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.56:22-10.0.0.1:47970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:29.745 [INFO][4343] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:29.745 [INFO][4343] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" iface="eth0" netns="/var/run/netns/cni-76ae4fea-e62a-ae4b-fc0e-115f24fb4ef4" Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:29.745 [INFO][4343] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" iface="eth0" netns="/var/run/netns/cni-76ae4fea-e62a-ae4b-fc0e-115f24fb4ef4" Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:29.745 [INFO][4343] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" iface="eth0" netns="/var/run/netns/cni-76ae4fea-e62a-ae4b-fc0e-115f24fb4ef4" Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:29.746 [INFO][4343] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:29.746 [INFO][4343] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:29.778 [INFO][4376] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" HandleID="k8s-pod-network.2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:29.778 [INFO][4376] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:30.457 [INFO][4376] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:30.481 [WARNING][4376] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" HandleID="k8s-pod-network.2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:30.481 [INFO][4376] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" HandleID="k8s-pod-network.2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:30.483 [INFO][4376] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:30.487730 env[1206]: 2025-07-15 11:31:30.485 [INFO][4343] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:30.490336 systemd[1]: run-netns-cni\x2d76ae4fea\x2de62a\x2dae4b\x2dfc0e\x2d115f24fb4ef4.mount: Deactivated successfully. Jul 15 11:31:30.491911 env[1206]: time="2025-07-15T11:31:30.491865759Z" level=info msg="TearDown network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\" successfully" Jul 15 11:31:30.491911 env[1206]: time="2025-07-15T11:31:30.491902398Z" level=info msg="StopPodSandbox for \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\" returns successfully" Jul 15 11:31:30.492589 env[1206]: time="2025-07-15T11:31:30.492553550Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f5fb48689-4zmxm,Uid:adce578c-d5dc-4d8e-aaf3-a574713b1977,Namespace:calico-system,Attempt:1,}" Jul 15 11:31:30.659083 systemd-networkd[1030]: cali0b7e16c3c9e: Link UP Jul 15 11:31:30.662150 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:31:30.662274 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0b7e16c3c9e: link becomes ready Jul 15 11:31:30.662269 systemd-networkd[1030]: cali0b7e16c3c9e: Gained carrier Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.584 [INFO][4396] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--hnmdh-eth0 csi-node-driver- calico-system b2372bb1-56e8-428a-9553-632abd324bfd 1131 0 2025-07-15 11:31:01 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-hnmdh eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali0b7e16c3c9e [] [] }} ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Namespace="calico-system" Pod="csi-node-driver-hnmdh" WorkloadEndpoint="localhost-k8s-csi--node--driver--hnmdh-" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.585 [INFO][4396] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Namespace="calico-system" Pod="csi-node-driver-hnmdh" WorkloadEndpoint="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.617 [INFO][4430] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" HandleID="k8s-pod-network.a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.617 [INFO][4430] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" HandleID="k8s-pod-network.a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004f760), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-hnmdh", "timestamp":"2025-07-15 11:31:30.617349292 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.617 [INFO][4430] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.617 [INFO][4430] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.617 [INFO][4430] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.626 [INFO][4430] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" host="localhost" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.631 [INFO][4430] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.636 [INFO][4430] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.638 [INFO][4430] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.640 [INFO][4430] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.640 [INFO][4430] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" host="localhost" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.641 [INFO][4430] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.646 [INFO][4430] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" host="localhost" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.653 [INFO][4430] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" host="localhost" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.653 [INFO][4430] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" host="localhost" Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.653 [INFO][4430] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:30.676095 env[1206]: 2025-07-15 11:31:30.654 [INFO][4430] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" HandleID="k8s-pod-network.a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.676876 env[1206]: 2025-07-15 11:31:30.656 [INFO][4396] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Namespace="calico-system" Pod="csi-node-driver-hnmdh" WorkloadEndpoint="localhost-k8s-csi--node--driver--hnmdh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--hnmdh-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b2372bb1-56e8-428a-9553-632abd324bfd", ResourceVersion:"1131", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-hnmdh", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0b7e16c3c9e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:30.676876 env[1206]: 2025-07-15 11:31:30.656 [INFO][4396] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Namespace="calico-system" Pod="csi-node-driver-hnmdh" WorkloadEndpoint="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.676876 env[1206]: 2025-07-15 11:31:30.656 [INFO][4396] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0b7e16c3c9e ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Namespace="calico-system" Pod="csi-node-driver-hnmdh" WorkloadEndpoint="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.676876 env[1206]: 2025-07-15 11:31:30.662 [INFO][4396] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Namespace="calico-system" Pod="csi-node-driver-hnmdh" WorkloadEndpoint="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.676876 env[1206]: 2025-07-15 11:31:30.662 [INFO][4396] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Namespace="calico-system" Pod="csi-node-driver-hnmdh" WorkloadEndpoint="localhost-k8s-csi--node--driver--hnmdh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--hnmdh-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b2372bb1-56e8-428a-9553-632abd324bfd", ResourceVersion:"1131", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b", Pod:"csi-node-driver-hnmdh", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0b7e16c3c9e", MAC:"3e:78:83:e7:61:ee", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:30.676876 env[1206]: 2025-07-15 11:31:30.671 [INFO][4396] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b" Namespace="calico-system" Pod="csi-node-driver-hnmdh" WorkloadEndpoint="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:30.685000 audit[4450]: NETFILTER_CFG table=filter:116 family=2 entries=56 op=nft_register_chain pid=4450 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:31:30.685000 audit[4450]: SYSCALL arch=c000003e syscall=46 success=yes exit=25516 a0=3 a1=7ffd65c912e0 a2=0 a3=7ffd65c912cc items=0 ppid=3538 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.685000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:31:30.693979 env[1206]: time="2025-07-15T11:31:30.693828036Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:30.693979 env[1206]: time="2025-07-15T11:31:30.693861369Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:30.693979 env[1206]: time="2025-07-15T11:31:30.693870566Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:30.694112 env[1206]: time="2025-07-15T11:31:30.694002083Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b pid=4456 runtime=io.containerd.runc.v2 Jul 15 11:31:30.704011 systemd[1]: Started cri-containerd-a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b.scope. Jul 15 11:31:30.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit: BPF prog-id=194 op=LOAD Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4456 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326237373366626131353234613030353630633932333433643163 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4456 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326237373366626131353234613030353630633932333433643163 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit: BPF prog-id=195 op=LOAD Jul 15 11:31:30.719000 audit[4463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000329860 items=0 ppid=4456 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326237373366626131353234613030353630633932333433643163 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.719000 audit: BPF prog-id=196 op=LOAD Jul 15 11:31:30.719000 audit[4463]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003298a8 items=0 ppid=4456 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326237373366626131353234613030353630633932333433643163 Jul 15 11:31:30.720000 audit: BPF prog-id=196 op=UNLOAD Jul 15 11:31:30.720000 audit: BPF prog-id=195 op=UNLOAD Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.720000 audit: BPF prog-id=197 op=LOAD Jul 15 11:31:30.720000 audit[4463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000329cb8 items=0 ppid=4456 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326237373366626131353234613030353630633932333433643163 Jul 15 11:31:30.721371 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:31:30.743361 env[1206]: time="2025-07-15T11:31:30.740925394Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hnmdh,Uid:b2372bb1-56e8-428a-9553-632abd324bfd,Namespace:calico-system,Attempt:1,} returns sandbox id \"a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b\"" Jul 15 11:31:30.760194 systemd-networkd[1030]: cali3eb180bfb19: Link UP Jul 15 11:31:30.761457 systemd-networkd[1030]: cali3eb180bfb19: Gained carrier Jul 15 11:31:30.761774 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3eb180bfb19: link becomes ready Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.562 [INFO][4390] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0 calico-kube-controllers-5f5fb48689- calico-system adce578c-d5dc-4d8e-aaf3-a574713b1977 1130 0 2025-07-15 11:31:01 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5f5fb48689 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-5f5fb48689-4zmxm eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali3eb180bfb19 [] [] }} ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Namespace="calico-system" Pod="calico-kube-controllers-5f5fb48689-4zmxm" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.563 [INFO][4390] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Namespace="calico-system" Pod="calico-kube-controllers-5f5fb48689-4zmxm" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.622 [INFO][4424] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" HandleID="k8s-pod-network.21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.622 [INFO][4424] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" HandleID="k8s-pod-network.21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00034d010), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-5f5fb48689-4zmxm", "timestamp":"2025-07-15 11:31:30.621997884 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.622 [INFO][4424] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.654 [INFO][4424] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.654 [INFO][4424] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.730 [INFO][4424] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" host="localhost" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.735 [INFO][4424] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.739 [INFO][4424] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.741 [INFO][4424] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.743 [INFO][4424] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.744 [INFO][4424] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" host="localhost" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.746 [INFO][4424] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7 Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.750 [INFO][4424] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" host="localhost" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.754 [INFO][4424] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" host="localhost" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.754 [INFO][4424] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" host="localhost" Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.755 [INFO][4424] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:30.775623 env[1206]: 2025-07-15 11:31:30.755 [INFO][4424] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" HandleID="k8s-pod-network.21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.776646 env[1206]: 2025-07-15 11:31:30.757 [INFO][4390] cni-plugin/k8s.go 418: Populated endpoint ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Namespace="calico-system" Pod="calico-kube-controllers-5f5fb48689-4zmxm" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0", GenerateName:"calico-kube-controllers-5f5fb48689-", Namespace:"calico-system", SelfLink:"", UID:"adce578c-d5dc-4d8e-aaf3-a574713b1977", ResourceVersion:"1130", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f5fb48689", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-5f5fb48689-4zmxm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali3eb180bfb19", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:30.776646 env[1206]: 2025-07-15 11:31:30.757 [INFO][4390] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Namespace="calico-system" Pod="calico-kube-controllers-5f5fb48689-4zmxm" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.776646 env[1206]: 2025-07-15 11:31:30.757 [INFO][4390] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3eb180bfb19 ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Namespace="calico-system" Pod="calico-kube-controllers-5f5fb48689-4zmxm" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.776646 env[1206]: 2025-07-15 11:31:30.762 [INFO][4390] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Namespace="calico-system" Pod="calico-kube-controllers-5f5fb48689-4zmxm" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.776646 env[1206]: 2025-07-15 11:31:30.762 [INFO][4390] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Namespace="calico-system" Pod="calico-kube-controllers-5f5fb48689-4zmxm" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0", GenerateName:"calico-kube-controllers-5f5fb48689-", Namespace:"calico-system", SelfLink:"", UID:"adce578c-d5dc-4d8e-aaf3-a574713b1977", ResourceVersion:"1130", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f5fb48689", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7", Pod:"calico-kube-controllers-5f5fb48689-4zmxm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali3eb180bfb19", MAC:"da:a8:05:bd:c9:48", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:30.776646 env[1206]: 2025-07-15 11:31:30.772 [INFO][4390] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7" Namespace="calico-system" Pod="calico-kube-controllers-5f5fb48689-4zmxm" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:30.784000 audit[4500]: NETFILTER_CFG table=filter:117 family=2 entries=60 op=nft_register_chain pid=4500 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:31:30.784000 audit[4500]: SYSCALL arch=c000003e syscall=46 success=yes exit=26704 a0=3 a1=7ffe749afc90 a2=0 a3=7ffe749afc7c items=0 ppid=3538 pid=4500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.784000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:31:30.813150 env[1206]: time="2025-07-15T11:31:30.813097629Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:30.813253 env[1206]: time="2025-07-15T11:31:30.813155368Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:30.813253 env[1206]: time="2025-07-15T11:31:30.813183340Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:30.813327 env[1206]: time="2025-07-15T11:31:30.813300570Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7 pid=4508 runtime=io.containerd.runc.v2 Jul 15 11:31:30.826390 systemd[1]: Started cri-containerd-21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7.scope. Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit: BPF prog-id=198 op=LOAD Jul 15 11:31:30.838000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.838000 audit[4516]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4508 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231633465363033353936353032656263366631313462386563326430 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4508 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231633465363033353936353032656263366631313462386563326430 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit: BPF prog-id=199 op=LOAD Jul 15 11:31:30.839000 audit[4516]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00009daf0 items=0 ppid=4508 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231633465363033353936353032656263366631313462386563326430 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit: BPF prog-id=200 op=LOAD Jul 15 11:31:30.839000 audit[4516]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00009db38 items=0 ppid=4508 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231633465363033353936353032656263366631313462386563326430 Jul 15 11:31:30.839000 audit: BPF prog-id=200 op=UNLOAD Jul 15 11:31:30.839000 audit: BPF prog-id=199 op=UNLOAD Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { perfmon } for pid=4516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit[4516]: AVC avc: denied { bpf } for pid=4516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:30.839000 audit: BPF prog-id=201 op=LOAD Jul 15 11:31:30.839000 audit[4516]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00009df48 items=0 ppid=4508 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:30.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231633465363033353936353032656263366631313462386563326430 Jul 15 11:31:30.841799 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:31:30.865578 env[1206]: time="2025-07-15T11:31:30.865524627Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f5fb48689-4zmxm,Uid:adce578c-d5dc-4d8e-aaf3-a574713b1977,Namespace:calico-system,Attempt:1,} returns sandbox id \"21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7\"" Jul 15 11:31:31.152279 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount800415702.mount: Deactivated successfully. Jul 15 11:31:31.828880 systemd-networkd[1030]: cali0b7e16c3c9e: Gained IPv6LL Jul 15 11:31:32.522833 systemd-networkd[1030]: cali3eb180bfb19: Gained IPv6LL Jul 15 11:31:32.731441 env[1206]: time="2025-07-15T11:31:32.731396693Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:32.733955 env[1206]: time="2025-07-15T11:31:32.733920569Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:32.736348 env[1206]: time="2025-07-15T11:31:32.736323447Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:32.738477 env[1206]: time="2025-07-15T11:31:32.738455777Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:32.738999 env[1206]: time="2025-07-15T11:31:32.738970533Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 15 11:31:32.739876 env[1206]: time="2025-07-15T11:31:32.739836027Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:31:32.745660 env[1206]: time="2025-07-15T11:31:32.745608206Z" level=info msg="CreateContainer within sandbox \"f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:31:32.760946 env[1206]: time="2025-07-15T11:31:32.760893483Z" level=info msg="CreateContainer within sandbox \"f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"b0b481cd424b308b2341addf9659ce1b0cc917c75c5f62a6480973dc488a0653\"" Jul 15 11:31:32.761524 env[1206]: time="2025-07-15T11:31:32.761405554Z" level=info msg="StartContainer for \"b0b481cd424b308b2341addf9659ce1b0cc917c75c5f62a6480973dc488a0653\"" Jul 15 11:31:32.778912 systemd[1]: Started cri-containerd-b0b481cd424b308b2341addf9659ce1b0cc917c75c5f62a6480973dc488a0653.scope. Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.789000 audit: BPF prog-id=202 op=LOAD Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3827 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:32.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623438316364343234623330386232333431616464663936353963 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3827 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:32.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623438316364343234623330386232333431616464663936353963 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit: BPF prog-id=203 op=LOAD Jul 15 11:31:32.790000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00020aa20 items=0 ppid=3827 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:32.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623438316364343234623330386232333431616464663936353963 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit: BPF prog-id=204 op=LOAD Jul 15 11:31:32.790000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00020aa68 items=0 ppid=3827 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:32.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623438316364343234623330386232333431616464663936353963 Jul 15 11:31:32.790000 audit: BPF prog-id=204 op=UNLOAD Jul 15 11:31:32.790000 audit: BPF prog-id=203 op=UNLOAD Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.790000 audit: BPF prog-id=205 op=LOAD Jul 15 11:31:32.790000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00020ae78 items=0 ppid=3827 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:32.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623438316364343234623330386232333431616464663936353963 Jul 15 11:31:32.814283 env[1206]: time="2025-07-15T11:31:32.814239907Z" level=info msg="StartContainer for \"b0b481cd424b308b2341addf9659ce1b0cc917c75c5f62a6480973dc488a0653\" returns successfully" Jul 15 11:31:33.257440 kubelet[1962]: I0715 11:31:33.257255 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-fss4l" podStartSLOduration=27.30154671 podStartE2EDuration="33.257242315s" podCreationTimestamp="2025-07-15 11:31:00 +0000 UTC" firstStartedPulling="2025-07-15 11:31:26.784012292 +0000 UTC m=+46.895259741" lastFinishedPulling="2025-07-15 11:31:32.739707897 +0000 UTC m=+52.850955346" observedRunningTime="2025-07-15 11:31:33.256392691 +0000 UTC m=+53.367640140" watchObservedRunningTime="2025-07-15 11:31:33.257242315 +0000 UTC m=+53.368489764" Jul 15 11:31:33.274000 audit[4603]: NETFILTER_CFG table=filter:118 family=2 entries=14 op=nft_register_rule pid=4603 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:33.274000 audit[4603]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffec2e59460 a2=0 a3=7ffec2e5944c items=0 ppid=2149 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:33.274000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:33.278000 audit[4603]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=4603 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:33.278000 audit[4603]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffec2e59460 a2=0 a3=7ffec2e5944c items=0 ppid=2149 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:33.278000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:33.757544 systemd[1]: run-containerd-runc-k8s.io-b0b481cd424b308b2341addf9659ce1b0cc917c75c5f62a6480973dc488a0653-runc.JlixTT.mount: Deactivated successfully. Jul 15 11:31:35.475337 systemd[1]: Started sshd@10-10.0.0.56:22-10.0.0.1:33286.service. Jul 15 11:31:35.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.56:22-10.0.0.1:33286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:35.476494 kernel: kauditd_printk_skb: 184 callbacks suppressed Jul 15 11:31:35.476564 kernel: audit: type=1130 audit(1752579095.474:1375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.56:22-10.0.0.1:33286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:35.510606 kernel: audit: type=1400 audit(1752579095.489:1376): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:35.510723 kernel: audit: type=1400 audit(1752579095.489:1377): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:35.510749 kernel: audit: type=1300 audit(1752579095.489:1377): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001805280 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:31:35.510776 kernel: audit: type=1300 audit(1752579095.489:1376): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001897080 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:31:35.510797 kernel: audit: type=1327 audit(1752579095.489:1377): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:35.489000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:35.489000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:35.489000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001805280 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:31:35.489000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001897080 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:31:35.489000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:35.489000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:35.515438 sshd[4633]: Accepted publickey for core from 10.0.0.1 port 33286 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:35.517217 kernel: audit: type=1327 audit(1752579095.489:1376): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:35.517301 kernel: audit: type=1101 audit(1752579095.513:1378): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.513000 audit[4633]: USER_ACCT pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.517850 sshd[4633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:35.516000 audit[4633]: CRED_ACQ pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.521900 systemd[1]: Started session-11.scope. Jul 15 11:31:35.522717 systemd-logind[1193]: New session 11 of user core. Jul 15 11:31:35.525246 kernel: audit: type=1103 audit(1752579095.516:1379): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.525339 kernel: audit: type=1006 audit(1752579095.516:1380): pid=4633 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 15 11:31:35.516000 audit[4633]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd48225f0 a2=3 a3=0 items=0 ppid=1 pid=4633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:35.516000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:35.527000 audit[4633]: USER_START pid=4633 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.528000 audit[4635]: CRED_ACQ pid=4635 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.733350 sshd[4633]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:35.733000 audit[4633]: USER_END pid=4633 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.733000 audit[4633]: CRED_DISP pid=4633 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.56:22-10.0.0.1:33300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:35.736842 systemd[1]: Started sshd@11-10.0.0.56:22-10.0.0.1:33300.service. Jul 15 11:31:35.739255 systemd[1]: sshd@10-10.0.0.56:22-10.0.0.1:33286.service: Deactivated successfully. Jul 15 11:31:35.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.56:22-10.0.0.1:33286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:35.739804 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:31:35.740275 systemd-logind[1193]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:31:35.740875 systemd-logind[1193]: Removed session 11. Jul 15 11:31:35.768000 audit[4649]: USER_ACCT pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.769589 sshd[4649]: Accepted publickey for core from 10.0.0.1 port 33300 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:35.769000 audit[4649]: CRED_ACQ pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.769000 audit[4649]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc788dca50 a2=3 a3=0 items=0 ppid=1 pid=4649 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:35.769000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:35.770589 sshd[4649]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:35.773890 systemd-logind[1193]: New session 12 of user core. Jul 15 11:31:35.774760 systemd[1]: Started session-12.scope. Jul 15 11:31:35.777000 audit[4649]: USER_START pid=4649 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:35.778000 audit[4652]: CRED_ACQ pid=4652 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:36.177000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:36.177000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:36.177000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c006967770 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:31:36.177000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:36.177000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00a6f9e00 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:31:36.177000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:36.178000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:36.178000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00338e560 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:31:36.178000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:36.181000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:36.181000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c006b9fb60 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:31:36.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:36.189000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:36.189000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c006b9fec0 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:31:36.189000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:36.189000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:36.189000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00578a160 a2=fc6 a3=0 items=0 ppid=1665 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c300,c545 key=(null) Jul 15 11:31:36.189000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:36.245648 systemd[1]: Started sshd@12-10.0.0.56:22-10.0.0.1:33314.service. Jul 15 11:31:36.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.56:22-10.0.0.1:33314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:36.255354 sshd[4649]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:36.255000 audit[4649]: USER_END pid=4649 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:36.255000 audit[4649]: CRED_DISP pid=4649 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:36.257851 systemd[1]: sshd@11-10.0.0.56:22-10.0.0.1:33300.service: Deactivated successfully. Jul 15 11:31:36.258694 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:31:36.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.56:22-10.0.0.1:33300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:36.259295 systemd-logind[1193]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:31:36.260164 systemd-logind[1193]: Removed session 12. Jul 15 11:31:36.284000 audit[4662]: USER_ACCT pid=4662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:36.285041 sshd[4662]: Accepted publickey for core from 10.0.0.1 port 33314 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:36.285000 audit[4662]: CRED_ACQ pid=4662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:36.285000 audit[4662]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9950cf80 a2=3 a3=0 items=0 ppid=1 pid=4662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:36.285000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:36.286383 sshd[4662]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:36.290026 systemd-logind[1193]: New session 13 of user core. Jul 15 11:31:36.291079 systemd[1]: Started session-13.scope. Jul 15 11:31:36.294000 audit[4662]: USER_START pid=4662 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:36.296000 audit[4665]: CRED_ACQ pid=4665 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:36.474901 sshd[4662]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:36.475000 audit[4662]: USER_END pid=4662 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:36.475000 audit[4662]: CRED_DISP pid=4662 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:36.477863 systemd[1]: sshd@12-10.0.0.56:22-10.0.0.1:33314.service: Deactivated successfully. Jul 15 11:31:36.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.56:22-10.0.0.1:33314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:36.478543 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:31:36.479074 systemd-logind[1193]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:31:36.479710 systemd-logind[1193]: Removed session 13. Jul 15 11:31:36.502256 env[1206]: time="2025-07-15T11:31:36.502203570Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:36.504544 env[1206]: time="2025-07-15T11:31:36.504484269Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:36.506282 env[1206]: time="2025-07-15T11:31:36.506246153Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:36.507965 env[1206]: time="2025-07-15T11:31:36.507936605Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:36.508496 env[1206]: time="2025-07-15T11:31:36.508444858Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:31:36.509691 env[1206]: time="2025-07-15T11:31:36.509658805Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:31:36.513726 env[1206]: time="2025-07-15T11:31:36.513671803Z" level=info msg="CreateContainer within sandbox \"2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:31:36.527420 env[1206]: time="2025-07-15T11:31:36.527370340Z" level=info msg="CreateContainer within sandbox \"2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"9ccaf64f9c870df0cb709ee4b510972d8dffa5aa373955d111ae94ce227ef4ac\"" Jul 15 11:31:36.527949 env[1206]: time="2025-07-15T11:31:36.527914851Z" level=info msg="StartContainer for \"9ccaf64f9c870df0cb709ee4b510972d8dffa5aa373955d111ae94ce227ef4ac\"" Jul 15 11:31:36.549932 systemd[1]: Started cri-containerd-9ccaf64f9c870df0cb709ee4b510972d8dffa5aa373955d111ae94ce227ef4ac.scope. Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.559000 audit: BPF prog-id=206 op=LOAD Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3910 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:36.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636166363466396338373064663063623730396565346235313039 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3910 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:36.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636166363466396338373064663063623730396565346235313039 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit: BPF prog-id=207 op=LOAD Jul 15 11:31:36.560000 audit[4682]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002a7850 items=0 ppid=3910 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:36.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636166363466396338373064663063623730396565346235313039 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit: BPF prog-id=208 op=LOAD Jul 15 11:31:36.560000 audit[4682]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002a7898 items=0 ppid=3910 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:36.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636166363466396338373064663063623730396565346235313039 Jul 15 11:31:36.560000 audit: BPF prog-id=208 op=UNLOAD Jul 15 11:31:36.560000 audit: BPF prog-id=207 op=UNLOAD Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:36.560000 audit: BPF prog-id=209 op=LOAD Jul 15 11:31:36.560000 audit[4682]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002a7ca8 items=0 ppid=3910 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:36.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636166363466396338373064663063623730396565346235313039 Jul 15 11:31:36.589379 env[1206]: time="2025-07-15T11:31:36.589310921Z" level=info msg="StartContainer for \"9ccaf64f9c870df0cb709ee4b510972d8dffa5aa373955d111ae94ce227ef4ac\" returns successfully" Jul 15 11:31:37.461000 audit[4721]: NETFILTER_CFG table=filter:120 family=2 entries=14 op=nft_register_rule pid=4721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:37.461000 audit[4721]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff14c1fd70 a2=0 a3=7fff14c1fd5c items=0 ppid=2149 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.461000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:37.469000 audit[4721]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=4721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:37.469000 audit[4721]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff14c1fd70 a2=0 a3=7fff14c1fd5c items=0 ppid=2149 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.469000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:37.896000 audit[4692]: AVC avc: denied { watch } for pid=4692 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_31_13.2679093705/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c793 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c348,c793 tclass=file permissive=0 Jul 15 11:31:37.896000 audit[4692]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0014e6ce0 a2=fc6 a3=0 items=0 ppid=3910 pid=4692 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c793 key=(null) Jul 15 11:31:37.896000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:31:38.080058 env[1206]: time="2025-07-15T11:31:38.079992818Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:38.082020 env[1206]: time="2025-07-15T11:31:38.081988352Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:38.083726 env[1206]: time="2025-07-15T11:31:38.083697503Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:38.085331 env[1206]: time="2025-07-15T11:31:38.085275278Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:38.085800 env[1206]: time="2025-07-15T11:31:38.085761951Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 15 11:31:38.086727 env[1206]: time="2025-07-15T11:31:38.086697923Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:31:38.090457 env[1206]: time="2025-07-15T11:31:38.090417237Z" level=info msg="CreateContainer within sandbox \"2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:31:38.103822 env[1206]: time="2025-07-15T11:31:38.103780076Z" level=info msg="CreateContainer within sandbox \"2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"82ae5c8ff8df580c86ff05265d9c91a9386ac0a8a6c7954f14815885276ac914\"" Jul 15 11:31:38.104357 env[1206]: time="2025-07-15T11:31:38.104311906Z" level=info msg="StartContainer for \"82ae5c8ff8df580c86ff05265d9c91a9386ac0a8a6c7954f14815885276ac914\"" Jul 15 11:31:38.125581 systemd[1]: Started cri-containerd-82ae5c8ff8df580c86ff05265d9c91a9386ac0a8a6c7954f14815885276ac914.scope. Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.137000 audit: BPF prog-id=210 op=LOAD Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3991 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616535633866663864663538306338366666303532363564396339 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3991 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616535633866663864663538306338366666303532363564396339 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit: BPF prog-id=211 op=LOAD Jul 15 11:31:38.138000 audit[4729]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024bd0 items=0 ppid=3991 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616535633866663864663538306338366666303532363564396339 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit: BPF prog-id=212 op=LOAD Jul 15 11:31:38.138000 audit[4729]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024c18 items=0 ppid=3991 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616535633866663864663538306338366666303532363564396339 Jul 15 11:31:38.138000 audit: BPF prog-id=212 op=UNLOAD Jul 15 11:31:38.138000 audit: BPF prog-id=211 op=UNLOAD Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.138000 audit: BPF prog-id=213 op=LOAD Jul 15 11:31:38.138000 audit[4729]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000025028 items=0 ppid=3991 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616535633866663864663538306338366666303532363564396339 Jul 15 11:31:38.162796 env[1206]: time="2025-07-15T11:31:38.162686198Z" level=info msg="StartContainer for \"82ae5c8ff8df580c86ff05265d9c91a9386ac0a8a6c7954f14815885276ac914\" returns successfully" Jul 15 11:31:38.177000 audit[4740]: AVC avc: denied { search } for pid=4740 comm="nginx" name="crypto" dev="proc" ino=29612 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c832 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:31:38.177000 audit[4740]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f9fb267e728 a2=0 a3=0 items=0 ppid=3991 pid=4740 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c832 key=(null) Jul 15 11:31:38.177000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:31:38.258860 kubelet[1962]: I0715 11:31:38.258820 1962 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:31:39.712932 env[1206]: time="2025-07-15T11:31:39.712875598Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:39.715492 env[1206]: time="2025-07-15T11:31:39.715457864Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:39.717029 env[1206]: time="2025-07-15T11:31:39.717004527Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:39.718406 env[1206]: time="2025-07-15T11:31:39.718353818Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:39.718885 env[1206]: time="2025-07-15T11:31:39.718846130Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:31:39.719630 env[1206]: time="2025-07-15T11:31:39.719608776Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:31:39.738603 env[1206]: time="2025-07-15T11:31:39.738569655Z" level=info msg="CreateContainer within sandbox \"9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:31:39.759483 env[1206]: time="2025-07-15T11:31:39.759433816Z" level=info msg="CreateContainer within sandbox \"9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"3167d94d87c6f36559e21937544dc1b7ea37669b9fbf097ab032f15ded36eebe\"" Jul 15 11:31:39.759981 env[1206]: time="2025-07-15T11:31:39.759930307Z" level=info msg="StartContainer for \"3167d94d87c6f36559e21937544dc1b7ea37669b9fbf097ab032f15ded36eebe\"" Jul 15 11:31:39.777721 systemd[1]: Started cri-containerd-3167d94d87c6f36559e21937544dc1b7ea37669b9fbf097ab032f15ded36eebe.scope. Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit: BPF prog-id=214 op=LOAD Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4239 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:39.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331363764393464383763366633363535396532313933373534346463 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4239 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:39.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331363764393464383763366633363535396532313933373534346463 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit: BPF prog-id=215 op=LOAD Jul 15 11:31:39.785000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00039f030 items=0 ppid=4239 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:39.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331363764393464383763366633363535396532313933373534346463 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.785000 audit: BPF prog-id=216 op=LOAD Jul 15 11:31:39.785000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00039f078 items=0 ppid=4239 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:39.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331363764393464383763366633363535396532313933373534346463 Jul 15 11:31:39.785000 audit: BPF prog-id=216 op=UNLOAD Jul 15 11:31:39.786000 audit: BPF prog-id=215 op=UNLOAD Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:39.786000 audit: BPF prog-id=217 op=LOAD Jul 15 11:31:39.786000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00039f488 items=0 ppid=4239 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:39.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331363764393464383763366633363535396532313933373534346463 Jul 15 11:31:40.019036 env[1206]: time="2025-07-15T11:31:40.018956518Z" level=info msg="StartContainer for \"3167d94d87c6f36559e21937544dc1b7ea37669b9fbf097ab032f15ded36eebe\" returns successfully" Jul 15 11:31:40.021364 env[1206]: time="2025-07-15T11:31:40.020442792Z" level=info msg="StopPodSandbox for \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\"" Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.049 [WARNING][4813] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0", GenerateName:"calico-apiserver-f9f8586f4-", Namespace:"calico-apiserver", SelfLink:"", UID:"d07f2c58-b78d-4a49-8177-494f02e5ce78", ResourceVersion:"1196", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f9f8586f4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77", Pod:"calico-apiserver-f9f8586f4-vwl5f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali13ca3ced966", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.049 [INFO][4813] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.049 [INFO][4813] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" iface="eth0" netns="" Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.049 [INFO][4813] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.049 [INFO][4813] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.067 [INFO][4822] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" HandleID="k8s-pod-network.166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.068 [INFO][4822] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.068 [INFO][4822] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.073 [WARNING][4822] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" HandleID="k8s-pod-network.166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.073 [INFO][4822] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" HandleID="k8s-pod-network.166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.078 [INFO][4822] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.083272 env[1206]: 2025-07-15 11:31:40.080 [INFO][4813] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:40.083272 env[1206]: time="2025-07-15T11:31:40.082888960Z" level=info msg="TearDown network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\" successfully" Jul 15 11:31:40.083272 env[1206]: time="2025-07-15T11:31:40.082921453Z" level=info msg="StopPodSandbox for \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\" returns successfully" Jul 15 11:31:40.083968 env[1206]: time="2025-07-15T11:31:40.083852904Z" level=info msg="RemovePodSandbox for \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\"" Jul 15 11:31:40.083997 env[1206]: time="2025-07-15T11:31:40.083922087Z" level=info msg="Forcibly stopping sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\"" Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.111 [WARNING][4841] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0", GenerateName:"calico-apiserver-f9f8586f4-", Namespace:"calico-apiserver", SelfLink:"", UID:"d07f2c58-b78d-4a49-8177-494f02e5ce78", ResourceVersion:"1196", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f9f8586f4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2b86e4b6d06b9aee3c4775b95f7c9f7559ed07145f9677b965dcb67e8a925c77", Pod:"calico-apiserver-f9f8586f4-vwl5f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali13ca3ced966", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.111 [INFO][4841] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.111 [INFO][4841] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" iface="eth0" netns="" Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.111 [INFO][4841] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.111 [INFO][4841] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.137 [INFO][4850] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" HandleID="k8s-pod-network.166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.137 [INFO][4850] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.137 [INFO][4850] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.142 [WARNING][4850] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" HandleID="k8s-pod-network.166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.142 [INFO][4850] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" HandleID="k8s-pod-network.166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Workload="localhost-k8s-calico--apiserver--f9f8586f4--vwl5f-eth0" Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.144 [INFO][4850] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.146775 env[1206]: 2025-07-15 11:31:40.145 [INFO][4841] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69" Jul 15 11:31:40.147226 env[1206]: time="2025-07-15T11:31:40.146791203Z" level=info msg="TearDown network for sandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\" successfully" Jul 15 11:31:40.151594 env[1206]: time="2025-07-15T11:31:40.151568269Z" level=info msg="RemovePodSandbox \"166dcd00baee53520edd5a15fc0f13bc44edb5d31b6b1a0799456b18cc545e69\" returns successfully" Jul 15 11:31:40.152165 env[1206]: time="2025-07-15T11:31:40.152136348Z" level=info msg="StopPodSandbox for \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\"" Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.180 [WARNING][4867] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0", GenerateName:"calico-kube-controllers-5f5fb48689-", Namespace:"calico-system", SelfLink:"", UID:"adce578c-d5dc-4d8e-aaf3-a574713b1977", ResourceVersion:"1146", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f5fb48689", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7", Pod:"calico-kube-controllers-5f5fb48689-4zmxm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali3eb180bfb19", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.180 [INFO][4867] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.180 [INFO][4867] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" iface="eth0" netns="" Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.180 [INFO][4867] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.180 [INFO][4867] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.200 [INFO][4877] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" HandleID="k8s-pod-network.2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.200 [INFO][4877] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.200 [INFO][4877] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.205 [WARNING][4877] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" HandleID="k8s-pod-network.2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.205 [INFO][4877] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" HandleID="k8s-pod-network.2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.207 [INFO][4877] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.211745 env[1206]: 2025-07-15 11:31:40.209 [INFO][4867] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:40.212293 env[1206]: time="2025-07-15T11:31:40.212260707Z" level=info msg="TearDown network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\" successfully" Jul 15 11:31:40.212372 env[1206]: time="2025-07-15T11:31:40.212352514Z" level=info msg="StopPodSandbox for \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\" returns successfully" Jul 15 11:31:40.212943 env[1206]: time="2025-07-15T11:31:40.212908089Z" level=info msg="RemovePodSandbox for \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\"" Jul 15 11:31:40.213002 env[1206]: time="2025-07-15T11:31:40.212949969Z" level=info msg="Forcibly stopping sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\"" Jul 15 11:31:40.274474 kubelet[1962]: I0715 11:31:40.274341 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-f9f8586f4-wxd59" podStartSLOduration=29.934862957 podStartE2EDuration="42.274326741s" podCreationTimestamp="2025-07-15 11:30:58 +0000 UTC" firstStartedPulling="2025-07-15 11:31:27.380031864 +0000 UTC m=+47.491279313" lastFinishedPulling="2025-07-15 11:31:39.719495648 +0000 UTC m=+59.830743097" observedRunningTime="2025-07-15 11:31:40.272445895 +0000 UTC m=+60.383693344" watchObservedRunningTime="2025-07-15 11:31:40.274326741 +0000 UTC m=+60.385574190" Jul 15 11:31:40.275911 kubelet[1962]: I0715 11:31:40.275862 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-f9f8586f4-vwl5f" podStartSLOduration=32.628127849 podStartE2EDuration="42.275854975s" podCreationTimestamp="2025-07-15 11:30:58 +0000 UTC" firstStartedPulling="2025-07-15 11:31:26.861765247 +0000 UTC m=+46.973012696" lastFinishedPulling="2025-07-15 11:31:36.509492353 +0000 UTC m=+56.620739822" observedRunningTime="2025-07-15 11:31:37.408962934 +0000 UTC m=+57.520210383" watchObservedRunningTime="2025-07-15 11:31:40.275854975 +0000 UTC m=+60.387102424" Jul 15 11:31:40.284000 audit[4914]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=4914 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:40.284000 audit[4914]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcf202eb40 a2=0 a3=7ffcf202eb2c items=0 ppid=2149 pid=4914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.284000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:40.291000 audit[4914]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=4914 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:40.291000 audit[4914]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffcf202eb40 a2=0 a3=7ffcf202eb2c items=0 ppid=2149 pid=4914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.291000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.244 [WARNING][4895] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0", GenerateName:"calico-kube-controllers-5f5fb48689-", Namespace:"calico-system", SelfLink:"", UID:"adce578c-d5dc-4d8e-aaf3-a574713b1977", ResourceVersion:"1146", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f5fb48689", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7", Pod:"calico-kube-controllers-5f5fb48689-4zmxm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali3eb180bfb19", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.244 [INFO][4895] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.244 [INFO][4895] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" iface="eth0" netns="" Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.244 [INFO][4895] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.244 [INFO][4895] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.278 [INFO][4904] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" HandleID="k8s-pod-network.2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.279 [INFO][4904] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.279 [INFO][4904] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.287 [WARNING][4904] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" HandleID="k8s-pod-network.2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.287 [INFO][4904] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" HandleID="k8s-pod-network.2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Workload="localhost-k8s-calico--kube--controllers--5f5fb48689--4zmxm-eth0" Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.289 [INFO][4904] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.295360 env[1206]: 2025-07-15 11:31:40.293 [INFO][4895] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2" Jul 15 11:31:40.295908 env[1206]: time="2025-07-15T11:31:40.295402737Z" level=info msg="TearDown network for sandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\" successfully" Jul 15 11:31:40.298701 env[1206]: time="2025-07-15T11:31:40.298652641Z" level=info msg="RemovePodSandbox \"2d2ff232333ee08aa9494c817f1e80e34ded6cafbafeb8fa56c856671d34bae2\" returns successfully" Jul 15 11:31:40.299211 env[1206]: time="2025-07-15T11:31:40.299163969Z" level=info msg="StopPodSandbox for \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\"" Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.329 [WARNING][4925] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--fss4l-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"5bc46ac2-129e-430f-97e3-3a35e48aec97", ResourceVersion:"1157", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2", Pod:"goldmane-768f4c5c69-fss4l", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif45cab70762", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.329 [INFO][4925] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.329 [INFO][4925] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" iface="eth0" netns="" Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.329 [INFO][4925] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.329 [INFO][4925] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.349 [INFO][4934] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" HandleID="k8s-pod-network.b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.350 [INFO][4934] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.350 [INFO][4934] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.360 [WARNING][4934] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" HandleID="k8s-pod-network.b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.360 [INFO][4934] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" HandleID="k8s-pod-network.b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.361 [INFO][4934] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.364585 env[1206]: 2025-07-15 11:31:40.363 [INFO][4925] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:40.365090 env[1206]: time="2025-07-15T11:31:40.364608785Z" level=info msg="TearDown network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\" successfully" Jul 15 11:31:40.365090 env[1206]: time="2025-07-15T11:31:40.364640997Z" level=info msg="StopPodSandbox for \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\" returns successfully" Jul 15 11:31:40.365141 env[1206]: time="2025-07-15T11:31:40.365103462Z" level=info msg="RemovePodSandbox for \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\"" Jul 15 11:31:40.365167 env[1206]: time="2025-07-15T11:31:40.365132507Z" level=info msg="Forcibly stopping sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\"" Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.392 [WARNING][4952] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--fss4l-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"5bc46ac2-129e-430f-97e3-3a35e48aec97", ResourceVersion:"1157", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f92b7715654ad84b7b93ef0825161376db43ce67f13eff6902ee47d82c1825b2", Pod:"goldmane-768f4c5c69-fss4l", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif45cab70762", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.392 [INFO][4952] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.392 [INFO][4952] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" iface="eth0" netns="" Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.393 [INFO][4952] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.393 [INFO][4952] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.409 [INFO][4961] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" HandleID="k8s-pod-network.b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.409 [INFO][4961] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.409 [INFO][4961] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.414 [WARNING][4961] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" HandleID="k8s-pod-network.b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.414 [INFO][4961] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" HandleID="k8s-pod-network.b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Workload="localhost-k8s-goldmane--768f4c5c69--fss4l-eth0" Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.415 [INFO][4961] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.419194 env[1206]: 2025-07-15 11:31:40.417 [INFO][4952] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff" Jul 15 11:31:40.419714 env[1206]: time="2025-07-15T11:31:40.419219555Z" level=info msg="TearDown network for sandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\" successfully" Jul 15 11:31:40.422715 env[1206]: time="2025-07-15T11:31:40.422663173Z" level=info msg="RemovePodSandbox \"b78fbc33b2120b97b8c2d9969d5b3f67d676f449c1b0fa476cfb374f3565bbff\" returns successfully" Jul 15 11:31:40.423231 env[1206]: time="2025-07-15T11:31:40.423198868Z" level=info msg="StopPodSandbox for \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\"" Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.451 [WARNING][4979] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--hnmdh-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b2372bb1-56e8-428a-9553-632abd324bfd", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b", Pod:"csi-node-driver-hnmdh", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0b7e16c3c9e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.451 [INFO][4979] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.451 [INFO][4979] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" iface="eth0" netns="" Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.451 [INFO][4979] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.451 [INFO][4979] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.473 [INFO][4988] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" HandleID="k8s-pod-network.35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.473 [INFO][4988] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.473 [INFO][4988] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.478 [WARNING][4988] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" HandleID="k8s-pod-network.35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.478 [INFO][4988] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" HandleID="k8s-pod-network.35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.479 [INFO][4988] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.483811 env[1206]: 2025-07-15 11:31:40.482 [INFO][4979] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:40.484273 env[1206]: time="2025-07-15T11:31:40.483841320Z" level=info msg="TearDown network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\" successfully" Jul 15 11:31:40.484273 env[1206]: time="2025-07-15T11:31:40.483872310Z" level=info msg="StopPodSandbox for \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\" returns successfully" Jul 15 11:31:40.484400 env[1206]: time="2025-07-15T11:31:40.484362337Z" level=info msg="RemovePodSandbox for \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\"" Jul 15 11:31:40.484463 env[1206]: time="2025-07-15T11:31:40.484406252Z" level=info msg="Forcibly stopping sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\"" Jul 15 11:31:40.503000 audit[4779]: AVC avc: denied { watch } for pid=4779 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_31_13.4135117013/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c122,c889 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c122,c889 tclass=file permissive=0 Jul 15 11:31:40.506376 kernel: kauditd_printk_skb: 236 callbacks suppressed Jul 15 11:31:40.506424 kernel: audit: type=1400 audit(1752579100.503:1470): avc: denied { watch } for pid=4779 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_31_13.4135117013/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c122,c889 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c122,c889 tclass=file permissive=0 Jul 15 11:31:40.503000 audit[4779]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a2d500 a2=fc6 a3=0 items=0 ppid=4239 pid=4779 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c122,c889 key=(null) Jul 15 11:31:40.515032 kernel: audit: type=1300 audit(1752579100.503:1470): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a2d500 a2=fc6 a3=0 items=0 ppid=4239 pid=4779 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c122,c889 key=(null) Jul 15 11:31:40.520187 kernel: audit: type=1327 audit(1752579100.503:1470): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:31:40.503000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.524 [WARNING][5006] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--hnmdh-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b2372bb1-56e8-428a-9553-632abd324bfd", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b", Pod:"csi-node-driver-hnmdh", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0b7e16c3c9e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.524 [INFO][5006] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.524 [INFO][5006] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" iface="eth0" netns="" Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.524 [INFO][5006] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.524 [INFO][5006] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.541 [INFO][5014] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" HandleID="k8s-pod-network.35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.542 [INFO][5014] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.542 [INFO][5014] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.550 [WARNING][5014] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" HandleID="k8s-pod-network.35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.550 [INFO][5014] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" HandleID="k8s-pod-network.35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Workload="localhost-k8s-csi--node--driver--hnmdh-eth0" Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.552 [INFO][5014] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.566747 env[1206]: 2025-07-15 11:31:40.562 [INFO][5006] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948" Jul 15 11:31:40.566747 env[1206]: time="2025-07-15T11:31:40.566656408Z" level=info msg="TearDown network for sandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\" successfully" Jul 15 11:31:40.586193 env[1206]: time="2025-07-15T11:31:40.586129606Z" level=info msg="RemovePodSandbox \"35fad3f5717f2d96fe35f1e3a65e79d146da9570ec4b3122ab06c2c3bac21948\" returns successfully" Jul 15 11:31:40.586893 env[1206]: time="2025-07-15T11:31:40.586864667Z" level=info msg="StopPodSandbox for \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\"" Jul 15 11:31:40.598000 audit[5039]: NETFILTER_CFG table=filter:124 family=2 entries=13 op=nft_register_rule pid=5039 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:40.598000 audit[5039]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd1bd13be0 a2=0 a3=7ffd1bd13bcc items=0 ppid=2149 pid=5039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.607431 kernel: audit: type=1325 audit(1752579100.598:1471): table=filter:124 family=2 entries=13 op=nft_register_rule pid=5039 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:40.607509 kernel: audit: type=1300 audit(1752579100.598:1471): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd1bd13be0 a2=0 a3=7ffd1bd13bcc items=0 ppid=2149 pid=5039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.607530 kernel: audit: type=1327 audit(1752579100.598:1471): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:40.598000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:40.609000 audit[5039]: NETFILTER_CFG table=nat:125 family=2 entries=27 op=nft_register_chain pid=5039 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:40.613706 kernel: audit: type=1325 audit(1752579100.609:1472): table=nat:125 family=2 entries=27 op=nft_register_chain pid=5039 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:40.609000 audit[5039]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffd1bd13be0 a2=0 a3=7ffd1bd13bcc items=0 ppid=2149 pid=5039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.618712 kernel: audit: type=1300 audit(1752579100.609:1472): arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffd1bd13be0 a2=0 a3=7ffd1bd13bcc items=0 ppid=2149 pid=5039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.609000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:40.621711 kernel: audit: type=1327 audit(1752579100.609:1472): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.632 [WARNING][5034] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0", GenerateName:"calico-apiserver-f9f8586f4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1c2b5616-5ace-4ead-8736-0b037583204d", ResourceVersion:"1223", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f9f8586f4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b", Pod:"calico-apiserver-f9f8586f4-wxd59", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b0918e6f86", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.632 [INFO][5034] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.632 [INFO][5034] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" iface="eth0" netns="" Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.632 [INFO][5034] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.632 [INFO][5034] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.654 [INFO][5044] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" HandleID="k8s-pod-network.f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.654 [INFO][5044] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.654 [INFO][5044] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.661 [WARNING][5044] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" HandleID="k8s-pod-network.f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.661 [INFO][5044] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" HandleID="k8s-pod-network.f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.662 [INFO][5044] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.666363 env[1206]: 2025-07-15 11:31:40.664 [INFO][5034] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:40.667008 env[1206]: time="2025-07-15T11:31:40.666389664Z" level=info msg="TearDown network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\" successfully" Jul 15 11:31:40.667008 env[1206]: time="2025-07-15T11:31:40.666422387Z" level=info msg="StopPodSandbox for \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\" returns successfully" Jul 15 11:31:40.667008 env[1206]: time="2025-07-15T11:31:40.666930350Z" level=info msg="RemovePodSandbox for \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\"" Jul 15 11:31:40.667008 env[1206]: time="2025-07-15T11:31:40.666968583Z" level=info msg="Forcibly stopping sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\"" Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.696 [WARNING][5064] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0", GenerateName:"calico-apiserver-f9f8586f4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1c2b5616-5ace-4ead-8736-0b037583204d", ResourceVersion:"1223", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f9f8586f4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9f46a4f2b6ea89644bd94cedc1029a862b425edd5ea2b3c7ab1fecbaacb3e77b", Pod:"calico-apiserver-f9f8586f4-wxd59", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b0918e6f86", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.696 [INFO][5064] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.696 [INFO][5064] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" iface="eth0" netns="" Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.696 [INFO][5064] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.696 [INFO][5064] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.714 [INFO][5072] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" HandleID="k8s-pod-network.f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.714 [INFO][5072] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.714 [INFO][5072] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.719 [WARNING][5072] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" HandleID="k8s-pod-network.f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.720 [INFO][5072] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" HandleID="k8s-pod-network.f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Workload="localhost-k8s-calico--apiserver--f9f8586f4--wxd59-eth0" Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.721 [INFO][5072] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.725313 env[1206]: 2025-07-15 11:31:40.722 [INFO][5064] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706" Jul 15 11:31:40.725960 env[1206]: time="2025-07-15T11:31:40.725331347Z" level=info msg="TearDown network for sandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\" successfully" Jul 15 11:31:40.730411 env[1206]: time="2025-07-15T11:31:40.730363677Z" level=info msg="RemovePodSandbox \"f013bacc765065388f7e9fffbaa3af128d1f43e6dc1323db59c25cac67b9f706\" returns successfully" Jul 15 11:31:40.730958 env[1206]: time="2025-07-15T11:31:40.730925463Z" level=info msg="StopPodSandbox for \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\"" Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.758 [WARNING][5091] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" WorkloadEndpoint="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.759 [INFO][5091] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.759 [INFO][5091] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" iface="eth0" netns="" Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.759 [INFO][5091] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.759 [INFO][5091] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.776 [INFO][5099] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" HandleID="k8s-pod-network.22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Workload="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.776 [INFO][5099] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.776 [INFO][5099] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.783 [WARNING][5099] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" HandleID="k8s-pod-network.22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Workload="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.783 [INFO][5099] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" HandleID="k8s-pod-network.22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Workload="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.784 [INFO][5099] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.787902 env[1206]: 2025-07-15 11:31:40.786 [INFO][5091] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:40.788270 env[1206]: time="2025-07-15T11:31:40.787944379Z" level=info msg="TearDown network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\" successfully" Jul 15 11:31:40.788270 env[1206]: time="2025-07-15T11:31:40.787976511Z" level=info msg="StopPodSandbox for \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\" returns successfully" Jul 15 11:31:40.788500 env[1206]: time="2025-07-15T11:31:40.788466358Z" level=info msg="RemovePodSandbox for \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\"" Jul 15 11:31:40.788551 env[1206]: time="2025-07-15T11:31:40.788506736Z" level=info msg="Forcibly stopping sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\"" Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.817 [WARNING][5117] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" WorkloadEndpoint="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.817 [INFO][5117] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.817 [INFO][5117] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" iface="eth0" netns="" Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.817 [INFO][5117] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.817 [INFO][5117] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.835 [INFO][5128] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" HandleID="k8s-pod-network.22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Workload="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.835 [INFO][5128] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.835 [INFO][5128] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.841 [WARNING][5128] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" HandleID="k8s-pod-network.22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Workload="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.841 [INFO][5128] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" HandleID="k8s-pod-network.22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Workload="localhost-k8s-whisker--6456cf68ff--f76xh-eth0" Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.842 [INFO][5128] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.846390 env[1206]: 2025-07-15 11:31:40.844 [INFO][5117] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b" Jul 15 11:31:40.846390 env[1206]: time="2025-07-15T11:31:40.846361438Z" level=info msg="TearDown network for sandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\" successfully" Jul 15 11:31:40.850250 env[1206]: time="2025-07-15T11:31:40.850197945Z" level=info msg="RemovePodSandbox \"22e86032064c6c7591f2bdeb6bb9ec5547383766486457216210f7bde1f6716b\" returns successfully" Jul 15 11:31:40.850770 env[1206]: time="2025-07-15T11:31:40.850737147Z" level=info msg="StopPodSandbox for \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\"" Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.883 [WARNING][5147] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6", ResourceVersion:"1119", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9", Pod:"coredns-674b8bbfcf-k9t6m", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid605430c165", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.883 [INFO][5147] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.883 [INFO][5147] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" iface="eth0" netns="" Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.883 [INFO][5147] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.883 [INFO][5147] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.901 [INFO][5156] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" HandleID="k8s-pod-network.089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.901 [INFO][5156] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.901 [INFO][5156] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.907 [WARNING][5156] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" HandleID="k8s-pod-network.089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.907 [INFO][5156] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" HandleID="k8s-pod-network.089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.909 [INFO][5156] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.913135 env[1206]: 2025-07-15 11:31:40.911 [INFO][5147] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:40.913580 env[1206]: time="2025-07-15T11:31:40.913160082Z" level=info msg="TearDown network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\" successfully" Jul 15 11:31:40.913580 env[1206]: time="2025-07-15T11:31:40.913191302Z" level=info msg="StopPodSandbox for \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\" returns successfully" Jul 15 11:31:40.913721 env[1206]: time="2025-07-15T11:31:40.913659206Z" level=info msg="RemovePodSandbox for \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\"" Jul 15 11:31:40.913872 env[1206]: time="2025-07-15T11:31:40.913721647Z" level=info msg="Forcibly stopping sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\"" Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.944 [WARNING][5173] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"2be4eb60-c25a-4ddc-93c8-6f8d8f50f0b6", ResourceVersion:"1119", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"44c263b7e04cadf90435d15e25f6e2293efc7e1f943f1f18111f994eaff552e9", Pod:"coredns-674b8bbfcf-k9t6m", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid605430c165", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.944 [INFO][5173] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.944 [INFO][5173] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" iface="eth0" netns="" Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.944 [INFO][5173] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.944 [INFO][5173] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.962 [INFO][5181] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" HandleID="k8s-pod-network.089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.962 [INFO][5181] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.962 [INFO][5181] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.969 [WARNING][5181] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" HandleID="k8s-pod-network.089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.969 [INFO][5181] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" HandleID="k8s-pod-network.089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Workload="localhost-k8s-coredns--674b8bbfcf--k9t6m-eth0" Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.971 [INFO][5181] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:40.974740 env[1206]: 2025-07-15 11:31:40.973 [INFO][5173] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b" Jul 15 11:31:40.975307 env[1206]: time="2025-07-15T11:31:40.974760615Z" level=info msg="TearDown network for sandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\" successfully" Jul 15 11:31:40.978559 env[1206]: time="2025-07-15T11:31:40.978532848Z" level=info msg="RemovePodSandbox \"089d7be8d9c8ebc298686bfb52a17cbfce05a9a294ee3baa2a8e81a41277108b\" returns successfully" Jul 15 11:31:40.979066 env[1206]: time="2025-07-15T11:31:40.979042393Z" level=info msg="StopPodSandbox for \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\"" Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.009 [WARNING][5200] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"71dab566-ad70-43d5-83cf-f9e5d62752a1", ResourceVersion:"1089", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6", Pod:"coredns-674b8bbfcf-v8rh7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7a72723608f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.009 [INFO][5200] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.009 [INFO][5200] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" iface="eth0" netns="" Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.009 [INFO][5200] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.009 [INFO][5200] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.029 [INFO][5209] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" HandleID="k8s-pod-network.ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.029 [INFO][5209] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.029 [INFO][5209] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.035 [WARNING][5209] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" HandleID="k8s-pod-network.ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.035 [INFO][5209] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" HandleID="k8s-pod-network.ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.037 [INFO][5209] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:41.040296 env[1206]: 2025-07-15 11:31:41.038 [INFO][5200] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:41.040788 env[1206]: time="2025-07-15T11:31:41.040326082Z" level=info msg="TearDown network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\" successfully" Jul 15 11:31:41.040788 env[1206]: time="2025-07-15T11:31:41.040355209Z" level=info msg="StopPodSandbox for \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\" returns successfully" Jul 15 11:31:41.040877 env[1206]: time="2025-07-15T11:31:41.040840696Z" level=info msg="RemovePodSandbox for \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\"" Jul 15 11:31:41.040926 env[1206]: time="2025-07-15T11:31:41.040879481Z" level=info msg="Forcibly stopping sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\"" Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.071 [WARNING][5226] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"71dab566-ad70-43d5-83cf-f9e5d62752a1", ResourceVersion:"1089", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0d00eecaf959786e35c719acf3f61622819326339c2d7e84416bf71cc95f9fc6", Pod:"coredns-674b8bbfcf-v8rh7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7a72723608f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.071 [INFO][5226] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.071 [INFO][5226] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" iface="eth0" netns="" Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.071 [INFO][5226] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.071 [INFO][5226] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.088 [INFO][5234] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" HandleID="k8s-pod-network.ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.089 [INFO][5234] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.089 [INFO][5234] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.095 [WARNING][5234] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" HandleID="k8s-pod-network.ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.095 [INFO][5234] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" HandleID="k8s-pod-network.ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Workload="localhost-k8s-coredns--674b8bbfcf--v8rh7-eth0" Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.096 [INFO][5234] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:31:41.103579 env[1206]: 2025-07-15 11:31:41.098 [INFO][5226] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f" Jul 15 11:31:41.104175 env[1206]: time="2025-07-15T11:31:41.104111067Z" level=info msg="TearDown network for sandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\" successfully" Jul 15 11:31:41.277952 env[1206]: time="2025-07-15T11:31:41.277890149Z" level=info msg="RemovePodSandbox \"ebe7599fe98ddeaaf233264781d6c4a693fa4ac7b4b51f562c80c25e64a7ec0f\" returns successfully" Jul 15 11:31:41.442074 env[1206]: time="2025-07-15T11:31:41.442019762Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:41.443872 env[1206]: time="2025-07-15T11:31:41.443810060Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:41.445226 env[1206]: time="2025-07-15T11:31:41.445191208Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:41.446573 env[1206]: time="2025-07-15T11:31:41.446543711Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:41.446916 env[1206]: time="2025-07-15T11:31:41.446871664Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 15 11:31:41.448068 env[1206]: time="2025-07-15T11:31:41.448015654Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:31:41.451983 env[1206]: time="2025-07-15T11:31:41.451951988Z" level=info msg="CreateContainer within sandbox \"a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:31:41.463185 env[1206]: time="2025-07-15T11:31:41.463143436Z" level=info msg="CreateContainer within sandbox \"a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"c9b5b2748b69024a655f0a30568db68cdbef3175cda56800ae6681d3615b9919\"" Jul 15 11:31:41.463735 env[1206]: time="2025-07-15T11:31:41.463661247Z" level=info msg="StartContainer for \"c9b5b2748b69024a655f0a30568db68cdbef3175cda56800ae6681d3615b9919\"" Jul 15 11:31:41.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.56:22-10.0.0.1:56696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.479796 systemd[1]: Started sshd@13-10.0.0.56:22-10.0.0.1:56696.service. Jul 15 11:31:41.486804 kernel: audit: type=1130 audit(1752579101.480:1473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.56:22-10.0.0.1:56696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.492249 systemd[1]: Started cri-containerd-c9b5b2748b69024a655f0a30568db68cdbef3175cda56800ae6681d3615b9919.scope. Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f734de1bd88 items=0 ppid=4456 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:41.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339623562323734386236393032346136353566306133303536386462 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit: BPF prog-id=218 op=LOAD Jul 15 11:31:41.503000 audit[5249]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000a0f88 items=0 ppid=4456 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:41.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339623562323734386236393032346136353566306133303536386462 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit: BPF prog-id=219 op=LOAD Jul 15 11:31:41.503000 audit[5249]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000a0fd8 items=0 ppid=4456 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:41.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339623562323734386236393032346136353566306133303536386462 Jul 15 11:31:41.503000 audit: BPF prog-id=219 op=UNLOAD Jul 15 11:31:41.503000 audit: BPF prog-id=218 op=UNLOAD Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:41.503000 audit: BPF prog-id=220 op=LOAD Jul 15 11:31:41.503000 audit[5249]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000a1068 items=0 ppid=4456 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:41.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339623562323734386236393032346136353566306133303536386462 Jul 15 11:31:41.516000 audit[5260]: USER_ACCT pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:41.518044 sshd[5260]: Accepted publickey for core from 10.0.0.1 port 56696 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:41.517000 audit[5260]: CRED_ACQ pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:41.517000 audit[5260]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6a620000 a2=3 a3=0 items=0 ppid=1 pid=5260 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:41.517000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:41.519362 sshd[5260]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:41.521119 env[1206]: time="2025-07-15T11:31:41.521054855Z" level=info msg="StartContainer for \"c9b5b2748b69024a655f0a30568db68cdbef3175cda56800ae6681d3615b9919\" returns successfully" Jul 15 11:31:41.524022 systemd[1]: Started session-14.scope. Jul 15 11:31:41.525258 systemd-logind[1193]: New session 14 of user core. Jul 15 11:31:41.527000 audit[5260]: USER_START pid=5260 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:41.529000 audit[5279]: CRED_ACQ pid=5279 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:41.736669 sshd[5260]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:41.735000 audit[5260]: USER_END pid=5260 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:41.736000 audit[5260]: CRED_DISP pid=5260 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:41.739277 systemd[1]: sshd@13-10.0.0.56:22-10.0.0.1:56696.service: Deactivated successfully. Jul 15 11:31:41.740051 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:31:41.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.56:22-10.0.0.1:56696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.740539 systemd-logind[1193]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:31:41.741264 systemd-logind[1193]: Removed session 14. Jul 15 11:31:42.207000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:42.207000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00177c600 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:31:42.207000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:42.207000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:42.207000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00177c620 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:31:42.207000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:42.209000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:42.209000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:42.209000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002daec80 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:31:42.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:42.209000 audit[1818]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003036ee0 a2=fc6 a3=0 items=0 ppid=1653 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c995 key=(null) Jul 15 11:31:42.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:44.776724 env[1206]: time="2025-07-15T11:31:44.776649758Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:44.779190 env[1206]: time="2025-07-15T11:31:44.779160096Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:44.781104 env[1206]: time="2025-07-15T11:31:44.781074996Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:44.783288 env[1206]: time="2025-07-15T11:31:44.783245419Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:44.783669 env[1206]: time="2025-07-15T11:31:44.783644919Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 15 11:31:44.785650 env[1206]: time="2025-07-15T11:31:44.785631438Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:31:44.798054 env[1206]: time="2025-07-15T11:31:44.798005705Z" level=info msg="CreateContainer within sandbox \"21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:31:44.808447 env[1206]: time="2025-07-15T11:31:44.808414395Z" level=info msg="CreateContainer within sandbox \"21c4e603596502ebc6f114b8ec2d071ea1486603f97c9aa621183235e926b3a7\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"3f668f552c9c7b5f8fbc0c8a6c7d7e6bb252f4e329cafba9d392b280751eb734\"" Jul 15 11:31:44.808857 env[1206]: time="2025-07-15T11:31:44.808823033Z" level=info msg="StartContainer for \"3f668f552c9c7b5f8fbc0c8a6c7d7e6bb252f4e329cafba9d392b280751eb734\"" Jul 15 11:31:44.821559 systemd[1]: Started cri-containerd-3f668f552c9c7b5f8fbc0c8a6c7d7e6bb252f4e329cafba9d392b280751eb734.scope. Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit: BPF prog-id=221 op=LOAD Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4508 pid=5299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:44.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366363638663535326339633762356638666263306338613663376437 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4508 pid=5299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:44.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366363638663535326339633762356638666263306338613663376437 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.833000 audit: BPF prog-id=222 op=LOAD Jul 15 11:31:44.833000 audit[5299]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000288830 items=0 ppid=4508 pid=5299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:44.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366363638663535326339633762356638666263306338613663376437 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit: BPF prog-id=223 op=LOAD Jul 15 11:31:44.834000 audit[5299]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000288878 items=0 ppid=4508 pid=5299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:44.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366363638663535326339633762356638666263306338613663376437 Jul 15 11:31:44.834000 audit: BPF prog-id=223 op=UNLOAD Jul 15 11:31:44.834000 audit: BPF prog-id=222 op=UNLOAD Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { perfmon } for pid=5299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit[5299]: AVC avc: denied { bpf } for pid=5299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:44.834000 audit: BPF prog-id=224 op=LOAD Jul 15 11:31:44.834000 audit[5299]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000288c88 items=0 ppid=4508 pid=5299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:44.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366363638663535326339633762356638666263306338613663376437 Jul 15 11:31:44.859447 env[1206]: time="2025-07-15T11:31:44.859410004Z" level=info msg="StartContainer for \"3f668f552c9c7b5f8fbc0c8a6c7d7e6bb252f4e329cafba9d392b280751eb734\" returns successfully" Jul 15 11:31:45.339388 kubelet[1962]: I0715 11:31:45.339308 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-5f5fb48689-4zmxm" podStartSLOduration=30.421665465 podStartE2EDuration="44.339289495s" podCreationTimestamp="2025-07-15 11:31:01 +0000 UTC" firstStartedPulling="2025-07-15 11:31:30.866981811 +0000 UTC m=+50.978229260" lastFinishedPulling="2025-07-15 11:31:44.784605841 +0000 UTC m=+64.895853290" observedRunningTime="2025-07-15 11:31:45.297840171 +0000 UTC m=+65.409087641" watchObservedRunningTime="2025-07-15 11:31:45.339289495 +0000 UTC m=+65.450536944" Jul 15 11:31:46.741329 systemd[1]: Started sshd@14-10.0.0.56:22-10.0.0.1:56700.service. Jul 15 11:31:46.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.56:22-10.0.0.1:56700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.742702 kernel: kauditd_printk_skb: 122 callbacks suppressed Jul 15 11:31:46.742756 kernel: audit: type=1130 audit(1752579106.740:1510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.56:22-10.0.0.1:56700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.778000 audit[5368]: USER_ACCT pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.779280 sshd[5368]: Accepted publickey for core from 10.0.0.1 port 56700 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:46.781075 sshd[5368]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:46.779000 audit[5368]: CRED_ACQ pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.784745 systemd-logind[1193]: New session 15 of user core. Jul 15 11:31:46.785452 systemd[1]: Started session-15.scope. Jul 15 11:31:46.786928 kernel: audit: type=1101 audit(1752579106.778:1511): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.786988 kernel: audit: type=1103 audit(1752579106.779:1512): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.787013 kernel: audit: type=1006 audit(1752579106.779:1513): pid=5368 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:31:46.789326 kernel: audit: type=1300 audit(1752579106.779:1513): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9308a080 a2=3 a3=0 items=0 ppid=1 pid=5368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:46.779000 audit[5368]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9308a080 a2=3 a3=0 items=0 ppid=1 pid=5368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:46.793431 kernel: audit: type=1327 audit(1752579106.779:1513): proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:46.779000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:46.788000 audit[5368]: USER_START pid=5368 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.799167 kernel: audit: type=1105 audit(1752579106.788:1514): pid=5368 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.799210 kernel: audit: type=1103 audit(1752579106.790:1515): pid=5370 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.790000 audit[5370]: CRED_ACQ pid=5370 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.988865 sshd[5368]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:46.989000 audit[5368]: USER_END pid=5368 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.991361 systemd[1]: sshd@14-10.0.0.56:22-10.0.0.1:56700.service: Deactivated successfully. Jul 15 11:31:46.992076 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:31:46.989000 audit[5368]: CRED_DISP pid=5368 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.995268 systemd-logind[1193]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:31:46.995927 systemd-logind[1193]: Removed session 15. Jul 15 11:31:46.997632 kernel: audit: type=1106 audit(1752579106.989:1516): pid=5368 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.997700 kernel: audit: type=1104 audit(1752579106.989:1517): pid=5368 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:46.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.56:22-10.0.0.1:56700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.457216 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2668072239.mount: Deactivated successfully. Jul 15 11:31:49.629618 env[1206]: time="2025-07-15T11:31:49.629556372Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:49.631600 env[1206]: time="2025-07-15T11:31:49.631562415Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:49.633201 env[1206]: time="2025-07-15T11:31:49.633177778Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:49.634641 env[1206]: time="2025-07-15T11:31:49.634617192Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:49.635206 env[1206]: time="2025-07-15T11:31:49.635169383Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 15 11:31:49.636186 env[1206]: time="2025-07-15T11:31:49.636150927Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:31:49.639498 env[1206]: time="2025-07-15T11:31:49.639462218Z" level=info msg="CreateContainer within sandbox \"2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:31:49.650236 env[1206]: time="2025-07-15T11:31:49.650182256Z" level=info msg="CreateContainer within sandbox \"2ff5950a3c48578b8fc2b10af9658d0af6a6c52d9cf4eaf7fcbb53af3e1d8f7d\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"78e2c540514226254c7983b0d92eeab39c650c33f9cf3ffb80736cb695717e2c\"" Jul 15 11:31:49.650654 env[1206]: time="2025-07-15T11:31:49.650632461Z" level=info msg="StartContainer for \"78e2c540514226254c7983b0d92eeab39c650c33f9cf3ffb80736cb695717e2c\"" Jul 15 11:31:49.664333 systemd[1]: Started cri-containerd-78e2c540514226254c7983b0d92eeab39c650c33f9cf3ffb80736cb695717e2c.scope. Jul 15 11:31:49.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit: BPF prog-id=225 op=LOAD Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3991 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653263353430353134323236323534633739383362306439326565 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3991 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653263353430353134323236323534633739383362306439326565 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit: BPF prog-id=226 op=LOAD Jul 15 11:31:49.678000 audit[5393]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031ff40 items=0 ppid=3991 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653263353430353134323236323534633739383362306439326565 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit: BPF prog-id=227 op=LOAD Jul 15 11:31:49.678000 audit[5393]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031ff88 items=0 ppid=3991 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653263353430353134323236323534633739383362306439326565 Jul 15 11:31:49.678000 audit: BPF prog-id=227 op=UNLOAD Jul 15 11:31:49.678000 audit: BPF prog-id=226 op=UNLOAD Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { perfmon } for pid=5393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit[5393]: AVC avc: denied { bpf } for pid=5393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.678000 audit: BPF prog-id=228 op=LOAD Jul 15 11:31:49.678000 audit[5393]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00036a398 items=0 ppid=3991 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653263353430353134323236323534633739383362306439326565 Jul 15 11:31:49.702845 env[1206]: time="2025-07-15T11:31:49.702791447Z" level=info msg="StartContainer for \"78e2c540514226254c7983b0d92eeab39c650c33f9cf3ffb80736cb695717e2c\" returns successfully" Jul 15 11:31:50.402154 kubelet[1962]: I0715 11:31:50.402073 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-6d94f7df8f-7ndfv" podStartSLOduration=2.707448336 podStartE2EDuration="25.402056195s" podCreationTimestamp="2025-07-15 11:31:25 +0000 UTC" firstStartedPulling="2025-07-15 11:31:26.941407438 +0000 UTC m=+47.052654877" lastFinishedPulling="2025-07-15 11:31:49.636015277 +0000 UTC m=+69.747262736" observedRunningTime="2025-07-15 11:31:50.40179269 +0000 UTC m=+70.513040159" watchObservedRunningTime="2025-07-15 11:31:50.402056195 +0000 UTC m=+70.513303654" Jul 15 11:31:50.515000 audit[5426]: NETFILTER_CFG table=filter:126 family=2 entries=11 op=nft_register_rule pid=5426 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:50.515000 audit[5426]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc03f238e0 a2=0 a3=7ffc03f238cc items=0 ppid=2149 pid=5426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:50.515000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:50.526000 audit[5426]: NETFILTER_CFG table=nat:127 family=2 entries=29 op=nft_register_chain pid=5426 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:50.526000 audit[5426]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffc03f238e0 a2=0 a3=7ffc03f238cc items=0 ppid=2149 pid=5426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:50.526000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:51.385057 env[1206]: time="2025-07-15T11:31:51.385008842Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:51.386582 env[1206]: time="2025-07-15T11:31:51.386550539Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:51.387952 env[1206]: time="2025-07-15T11:31:51.387925065Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:51.389164 env[1206]: time="2025-07-15T11:31:51.389145797Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:51.389523 env[1206]: time="2025-07-15T11:31:51.389488034Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 15 11:31:51.393278 env[1206]: time="2025-07-15T11:31:51.393247164Z" level=info msg="CreateContainer within sandbox \"a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:31:51.405389 env[1206]: time="2025-07-15T11:31:51.405345972Z" level=info msg="CreateContainer within sandbox \"a82b773fba1524a00560c92343d1c30c1326998f137c469d1b985b5553b47d6b\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"29444ea69e7fed750192558b8a0f42826c6af73df09838f2f9822155800be542\"" Jul 15 11:31:51.407274 env[1206]: time="2025-07-15T11:31:51.407005776Z" level=info msg="StartContainer for \"29444ea69e7fed750192558b8a0f42826c6af73df09838f2f9822155800be542\"" Jul 15 11:31:51.426709 systemd[1]: Started cri-containerd-29444ea69e7fed750192558b8a0f42826c6af73df09838f2f9822155800be542.scope. Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7ff35b0642f8 items=0 ppid=4456 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:51.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239343434656136396537666564373530313932353538623861306634 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit: BPF prog-id=229 op=LOAD Jul 15 11:31:51.436000 audit[5436]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000024ad8 items=0 ppid=4456 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:51.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239343434656136396537666564373530313932353538623861306634 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit: BPF prog-id=230 op=LOAD Jul 15 11:31:51.436000 audit[5436]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000024b28 items=0 ppid=4456 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:51.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239343434656136396537666564373530313932353538623861306634 Jul 15 11:31:51.436000 audit: BPF prog-id=230 op=UNLOAD Jul 15 11:31:51.436000 audit: BPF prog-id=229 op=UNLOAD Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { perfmon } for pid=5436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit[5436]: AVC avc: denied { bpf } for pid=5436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:51.436000 audit: BPF prog-id=231 op=LOAD Jul 15 11:31:51.436000 audit[5436]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000024bb8 items=0 ppid=4456 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:51.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239343434656136396537666564373530313932353538623861306634 Jul 15 11:31:51.449503 env[1206]: time="2025-07-15T11:31:51.449460323Z" level=info msg="StartContainer for \"29444ea69e7fed750192558b8a0f42826c6af73df09838f2f9822155800be542\" returns successfully" Jul 15 11:31:51.994236 systemd[1]: Started sshd@15-10.0.0.56:22-10.0.0.1:45914.service. Jul 15 11:31:51.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.56:22-10.0.0.1:45914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:51.995378 kernel: kauditd_printk_skb: 107 callbacks suppressed Jul 15 11:31:51.995540 kernel: audit: type=1130 audit(1752579111.993:1545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.56:22-10.0.0.1:45914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:52.031000 audit[5466]: USER_ACCT pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.032913 sshd[5466]: Accepted publickey for core from 10.0.0.1 port 45914 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:52.035213 sshd[5466]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:52.034000 audit[5466]: CRED_ACQ pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.038269 systemd-logind[1193]: New session 16 of user core. Jul 15 11:31:52.038992 systemd[1]: Started session-16.scope. Jul 15 11:31:52.041309 kernel: audit: type=1101 audit(1752579112.031:1546): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.041365 kernel: audit: type=1103 audit(1752579112.034:1547): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.041385 kernel: audit: type=1006 audit(1752579112.034:1548): pid=5466 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 15 11:31:52.034000 audit[5466]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4fb18d80 a2=3 a3=0 items=0 ppid=1 pid=5466 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:52.049832 kernel: audit: type=1300 audit(1752579112.034:1548): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4fb18d80 a2=3 a3=0 items=0 ppid=1 pid=5466 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:52.049908 kernel: audit: type=1327 audit(1752579112.034:1548): proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:52.034000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:52.041000 audit[5466]: USER_START pid=5466 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.056632 kernel: audit: type=1105 audit(1752579112.041:1549): pid=5466 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.042000 audit[5468]: CRED_ACQ pid=5468 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.061708 kernel: audit: type=1103 audit(1752579112.042:1550): pid=5468 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.080530 kubelet[1962]: I0715 11:31:52.080498 1962 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:31:52.082193 kubelet[1962]: I0715 11:31:52.082175 1962 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:31:52.214076 sshd[5466]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:52.214000 audit[5466]: USER_END pid=5466 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.216382 systemd[1]: sshd@15-10.0.0.56:22-10.0.0.1:45914.service: Deactivated successfully. Jul 15 11:31:52.217262 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:31:52.217984 systemd-logind[1193]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:31:52.218778 systemd-logind[1193]: Removed session 16. Jul 15 11:31:52.214000 audit[5466]: CRED_DISP pid=5466 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.223468 kernel: audit: type=1106 audit(1752579112.214:1551): pid=5466 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.223528 kernel: audit: type=1104 audit(1752579112.214:1552): pid=5466 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:52.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.56:22-10.0.0.1:45914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:52.364807 kubelet[1962]: I0715 11:31:52.364638 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-hnmdh" podStartSLOduration=30.719160707 podStartE2EDuration="51.364619578s" podCreationTimestamp="2025-07-15 11:31:01 +0000 UTC" firstStartedPulling="2025-07-15 11:31:30.744614245 +0000 UTC m=+50.855861684" lastFinishedPulling="2025-07-15 11:31:51.390073116 +0000 UTC m=+71.501320555" observedRunningTime="2025-07-15 11:31:52.363990683 +0000 UTC m=+72.475238162" watchObservedRunningTime="2025-07-15 11:31:52.364619578 +0000 UTC m=+72.475867027" Jul 15 11:31:57.217798 systemd[1]: Started sshd@16-10.0.0.56:22-10.0.0.1:45930.service. Jul 15 11:31:57.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.56:22-10.0.0.1:45930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:57.219230 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:31:57.219281 kernel: audit: type=1130 audit(1752579117.217:1554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.56:22-10.0.0.1:45930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:57.254000 audit[5503]: USER_ACCT pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.255508 sshd[5503]: Accepted publickey for core from 10.0.0.1 port 45930 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:57.257249 sshd[5503]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:57.256000 audit[5503]: CRED_ACQ pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.262985 systemd-logind[1193]: New session 17 of user core. Jul 15 11:31:57.263906 systemd[1]: Started session-17.scope. Jul 15 11:31:57.264213 kernel: audit: type=1101 audit(1752579117.254:1555): pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.264256 kernel: audit: type=1103 audit(1752579117.256:1556): pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.264277 kernel: audit: type=1006 audit(1752579117.256:1557): pid=5503 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 15 11:31:57.256000 audit[5503]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcff5832d0 a2=3 a3=0 items=0 ppid=1 pid=5503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:57.271658 kernel: audit: type=1300 audit(1752579117.256:1557): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcff5832d0 a2=3 a3=0 items=0 ppid=1 pid=5503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:57.271738 kernel: audit: type=1327 audit(1752579117.256:1557): proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:57.256000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:57.267000 audit[5503]: USER_START pid=5503 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.277656 kernel: audit: type=1105 audit(1752579117.267:1558): pid=5503 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.277828 kernel: audit: type=1103 audit(1752579117.269:1559): pid=5505 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.269000 audit[5505]: CRED_ACQ pid=5505 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.391038 sshd[5503]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:57.391000 audit[5503]: USER_END pid=5503 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.395463 systemd[1]: Started sshd@17-10.0.0.56:22-10.0.0.1:45934.service. Jul 15 11:31:57.396700 kernel: audit: type=1106 audit(1752579117.391:1560): pid=5503 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.396797 systemd[1]: sshd@16-10.0.0.56:22-10.0.0.1:45930.service: Deactivated successfully. Jul 15 11:31:57.392000 audit[5503]: CRED_DISP pid=5503 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.397455 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:31:57.398555 systemd-logind[1193]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:31:57.399387 systemd-logind[1193]: Removed session 17. Jul 15 11:31:57.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.56:22-10.0.0.1:45934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:57.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.56:22-10.0.0.1:45930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:57.400729 kernel: audit: type=1104 audit(1752579117.392:1561): pid=5503 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.428000 audit[5515]: USER_ACCT pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.428968 sshd[5515]: Accepted publickey for core from 10.0.0.1 port 45934 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:57.428000 audit[5515]: CRED_ACQ pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.429000 audit[5515]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6f3982a0 a2=3 a3=0 items=0 ppid=1 pid=5515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:57.429000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:57.429971 sshd[5515]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:57.433377 systemd-logind[1193]: New session 18 of user core. Jul 15 11:31:57.434317 systemd[1]: Started session-18.scope. Jul 15 11:31:57.437000 audit[5515]: USER_START pid=5515 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.439000 audit[5518]: CRED_ACQ pid=5518 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.630065 sshd[5515]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:57.630000 audit[5515]: USER_END pid=5515 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.630000 audit[5515]: CRED_DISP pid=5515 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.633486 systemd[1]: Started sshd@18-10.0.0.56:22-10.0.0.1:45950.service. Jul 15 11:31:57.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.56:22-10.0.0.1:45950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:57.634879 systemd[1]: sshd@17-10.0.0.56:22-10.0.0.1:45934.service: Deactivated successfully. Jul 15 11:31:57.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.56:22-10.0.0.1:45934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:57.635898 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:31:57.636600 systemd-logind[1193]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:31:57.637544 systemd-logind[1193]: Removed session 18. Jul 15 11:31:57.671000 audit[5526]: USER_ACCT pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.672568 sshd[5526]: Accepted publickey for core from 10.0.0.1 port 45950 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:57.672000 audit[5526]: CRED_ACQ pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.672000 audit[5526]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedeabdc40 a2=3 a3=0 items=0 ppid=1 pid=5526 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:57.672000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:57.673904 sshd[5526]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:57.677399 systemd-logind[1193]: New session 19 of user core. Jul 15 11:31:57.678132 systemd[1]: Started session-19.scope. Jul 15 11:31:57.681000 audit[5526]: USER_START pid=5526 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:57.683000 audit[5529]: CRED_ACQ pid=5529 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.582000 audit[5541]: NETFILTER_CFG table=filter:128 family=2 entries=22 op=nft_register_rule pid=5541 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:59.582000 audit[5541]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffcf2ce4870 a2=0 a3=7ffcf2ce485c items=0 ppid=2149 pid=5541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:59.582000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:59.592664 sshd[5526]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:59.592000 audit[5526]: USER_END pid=5526 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.593000 audit[5526]: CRED_DISP pid=5526 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.593000 audit[5541]: NETFILTER_CFG table=nat:129 family=2 entries=24 op=nft_register_rule pid=5541 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:59.593000 audit[5541]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffcf2ce4870 a2=0 a3=0 items=0 ppid=2149 pid=5541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:59.593000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:59.595436 systemd[1]: Started sshd@19-10.0.0.56:22-10.0.0.1:45952.service. Jul 15 11:31:59.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.56:22-10.0.0.1:45952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:59.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.56:22-10.0.0.1:45950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:59.606000 audit[5547]: NETFILTER_CFG table=filter:130 family=2 entries=34 op=nft_register_rule pid=5547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:59.606000 audit[5547]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffd7b130430 a2=0 a3=7ffd7b13041c items=0 ppid=2149 pid=5547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:59.606000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:59.611000 audit[5547]: NETFILTER_CFG table=nat:131 family=2 entries=24 op=nft_register_rule pid=5547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:59.611000 audit[5547]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffd7b130430 a2=0 a3=0 items=0 ppid=2149 pid=5547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:59.611000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:59.595884 systemd[1]: sshd@18-10.0.0.56:22-10.0.0.1:45950.service: Deactivated successfully. Jul 15 11:31:59.596580 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:31:59.597178 systemd-logind[1193]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:31:59.598121 systemd-logind[1193]: Removed session 19. Jul 15 11:31:59.627000 audit[5543]: USER_ACCT pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.628758 sshd[5543]: Accepted publickey for core from 10.0.0.1 port 45952 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:59.628000 audit[5543]: CRED_ACQ pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.628000 audit[5543]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff93cc4db0 a2=3 a3=0 items=0 ppid=1 pid=5543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:59.628000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:59.630008 sshd[5543]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:59.633379 systemd-logind[1193]: New session 20 of user core. Jul 15 11:31:59.634141 systemd[1]: Started session-20.scope. Jul 15 11:31:59.636000 audit[5543]: USER_START pid=5543 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.637000 audit[5548]: CRED_ACQ pid=5548 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.957215 sshd[5543]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:59.959799 systemd[1]: Started sshd@20-10.0.0.56:22-10.0.0.1:51970.service. Jul 15 11:31:59.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.56:22-10.0.0.1:51970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:59.966000 audit[5543]: USER_END pid=5543 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.966000 audit[5543]: CRED_DISP pid=5543 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.968963 systemd[1]: sshd@19-10.0.0.56:22-10.0.0.1:45952.service: Deactivated successfully. Jul 15 11:31:59.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.56:22-10.0.0.1:45952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:59.970209 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:31:59.970816 systemd-logind[1193]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:31:59.971547 systemd-logind[1193]: Removed session 20. Jul 15 11:31:59.993734 kubelet[1962]: E0715 11:31:59.993696 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:59.995000 audit[5557]: USER_ACCT pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.996159 sshd[5557]: Accepted publickey for core from 10.0.0.1 port 51970 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:31:59.996000 audit[5557]: CRED_ACQ pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:59.996000 audit[5557]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1a432380 a2=3 a3=0 items=0 ppid=1 pid=5557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:59.996000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:59.997409 sshd[5557]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:00.000603 systemd-logind[1193]: New session 21 of user core. Jul 15 11:32:00.001337 systemd[1]: Started session-21.scope. Jul 15 11:32:00.005000 audit[5557]: USER_START pid=5557 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:00.007000 audit[5560]: CRED_ACQ pid=5560 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:00.121103 sshd[5557]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:00.121000 audit[5557]: USER_END pid=5557 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:00.121000 audit[5557]: CRED_DISP pid=5557 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:00.123668 systemd[1]: sshd@20-10.0.0.56:22-10.0.0.1:51970.service: Deactivated successfully. Jul 15 11:32:00.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.56:22-10.0.0.1:51970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:00.124380 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:32:00.124943 systemd-logind[1193]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:32:00.125622 systemd-logind[1193]: Removed session 21. Jul 15 11:32:01.985456 kubelet[1962]: E0715 11:32:01.985418 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:02.750279 kubelet[1962]: I0715 11:32:02.750238 1962 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:32:03.395000 audit[5574]: NETFILTER_CFG table=filter:132 family=2 entries=34 op=nft_register_rule pid=5574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:03.400706 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 15 11:32:03.400773 kernel: audit: type=1325 audit(1752579123.395:1603): table=filter:132 family=2 entries=34 op=nft_register_rule pid=5574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:03.400806 kernel: audit: type=1300 audit(1752579123.395:1603): arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7fffb4e09d50 a2=0 a3=7fffb4e09d3c items=0 ppid=2149 pid=5574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:03.395000 audit[5574]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7fffb4e09d50 a2=0 a3=7fffb4e09d3c items=0 ppid=2149 pid=5574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:03.405083 kernel: audit: type=1327 audit(1752579123.395:1603): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:03.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:03.411000 audit[5574]: NETFILTER_CFG table=nat:133 family=2 entries=36 op=nft_register_chain pid=5574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:03.411000 audit[5574]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fffb4e09d50 a2=0 a3=7fffb4e09d3c items=0 ppid=2149 pid=5574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:03.420274 kernel: audit: type=1325 audit(1752579123.411:1604): table=nat:133 family=2 entries=36 op=nft_register_chain pid=5574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:03.420328 kernel: audit: type=1300 audit(1752579123.411:1604): arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fffb4e09d50 a2=0 a3=7fffb4e09d3c items=0 ppid=2149 pid=5574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:03.420363 kernel: audit: type=1327 audit(1752579123.411:1604): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:03.411000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:04.006000 audit[5576]: NETFILTER_CFG table=filter:134 family=2 entries=34 op=nft_register_rule pid=5576 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:04.006000 audit[5576]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc49fb11d0 a2=0 a3=7ffc49fb11bc items=0 ppid=2149 pid=5576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:04.015041 kernel: audit: type=1325 audit(1752579124.006:1605): table=filter:134 family=2 entries=34 op=nft_register_rule pid=5576 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:04.015108 kernel: audit: type=1300 audit(1752579124.006:1605): arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc49fb11d0 a2=0 a3=7ffc49fb11bc items=0 ppid=2149 pid=5576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:04.015127 kernel: audit: type=1327 audit(1752579124.006:1605): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:04.006000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:04.017000 audit[5576]: NETFILTER_CFG table=nat:135 family=2 entries=36 op=nft_unregister_chain pid=5576 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:04.017000 audit[5576]: SYSCALL arch=c000003e syscall=46 success=yes exit=10244 a0=3 a1=7ffc49fb11d0 a2=0 a3=7ffc49fb11bc items=0 ppid=2149 pid=5576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:04.017000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:04.022703 kernel: audit: type=1325 audit(1752579124.017:1606): table=nat:135 family=2 entries=36 op=nft_unregister_chain pid=5576 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:04.268638 systemd[1]: run-containerd-runc-k8s.io-b0b481cd424b308b2341addf9659ce1b0cc917c75c5f62a6480973dc488a0653-runc.prho7W.mount: Deactivated successfully. Jul 15 11:32:04.942000 audit[5598]: NETFILTER_CFG table=filter:136 family=2 entries=34 op=nft_register_rule pid=5598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:04.942000 audit[5598]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffd8adaa380 a2=0 a3=7ffd8adaa36c items=0 ppid=2149 pid=5598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:04.942000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:04.946000 audit[5598]: NETFILTER_CFG table=nat:137 family=2 entries=36 op=nft_register_chain pid=5598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:04.946000 audit[5598]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffd8adaa380 a2=0 a3=7ffd8adaa36c items=0 ppid=2149 pid=5598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:04.946000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:05.125673 systemd[1]: Started sshd@21-10.0.0.56:22-10.0.0.1:51978.service. Jul 15 11:32:05.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.56:22-10.0.0.1:51978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:05.159000 audit[5600]: USER_ACCT pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.161582 sshd[5600]: Accepted publickey for core from 10.0.0.1 port 51978 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:32:05.160000 audit[5600]: CRED_ACQ pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.160000 audit[5600]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7ac2bc90 a2=3 a3=0 items=0 ppid=1 pid=5600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:05.160000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:05.162893 sshd[5600]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:05.167822 systemd-logind[1193]: New session 22 of user core. Jul 15 11:32:05.168585 systemd[1]: Started session-22.scope. Jul 15 11:32:05.172000 audit[5600]: USER_START pid=5600 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.174000 audit[5602]: CRED_ACQ pid=5602 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.420198 sshd[5600]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:05.419000 audit[5600]: USER_END pid=5600 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.419000 audit[5600]: CRED_DISP pid=5600 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.422619 systemd[1]: sshd@21-10.0.0.56:22-10.0.0.1:51978.service: Deactivated successfully. Jul 15 11:32:05.423374 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:32:05.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.56:22-10.0.0.1:51978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:05.423870 systemd-logind[1193]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:32:05.424551 systemd-logind[1193]: Removed session 22. Jul 15 11:32:05.959000 audit[5613]: NETFILTER_CFG table=filter:138 family=2 entries=33 op=nft_register_rule pid=5613 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:05.959000 audit[5613]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd5d875850 a2=0 a3=7ffd5d87583c items=0 ppid=2149 pid=5613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:05.959000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:05.963000 audit[5613]: NETFILTER_CFG table=nat:139 family=2 entries=31 op=nft_register_chain pid=5613 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:05.963000 audit[5613]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffd5d875850 a2=0 a3=7ffd5d87583c items=0 ppid=2149 pid=5613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:05.963000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:06.985340 kubelet[1962]: E0715 11:32:06.985289 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:10.058000 audit[5621]: NETFILTER_CFG table=filter:140 family=2 entries=20 op=nft_register_rule pid=5621 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:10.061591 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 15 11:32:10.061641 kernel: audit: type=1325 audit(1752579130.058:1620): table=filter:140 family=2 entries=20 op=nft_register_rule pid=5621 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:10.058000 audit[5621]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe135aeef0 a2=0 a3=7ffe135aeedc items=0 ppid=2149 pid=5621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.070802 kernel: audit: type=1300 audit(1752579130.058:1620): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe135aeef0 a2=0 a3=7ffe135aeedc items=0 ppid=2149 pid=5621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.058000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:10.073403 kernel: audit: type=1327 audit(1752579130.058:1620): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:10.073000 audit[5621]: NETFILTER_CFG table=nat:141 family=2 entries=110 op=nft_register_chain pid=5621 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:10.073000 audit[5621]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffe135aeef0 a2=0 a3=7ffe135aeedc items=0 ppid=2149 pid=5621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.083424 kernel: audit: type=1325 audit(1752579130.073:1621): table=nat:141 family=2 entries=110 op=nft_register_chain pid=5621 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:10.083478 kernel: audit: type=1300 audit(1752579130.073:1621): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffe135aeef0 a2=0 a3=7ffe135aeedc items=0 ppid=2149 pid=5621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.083501 kernel: audit: type=1327 audit(1752579130.073:1621): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:10.073000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:10.424530 systemd[1]: Started sshd@22-10.0.0.56:22-10.0.0.1:50016.service. Jul 15 11:32:10.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.56:22-10.0.0.1:50016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:10.439869 kernel: audit: type=1130 audit(1752579130.423:1622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.56:22-10.0.0.1:50016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:10.454000 audit[5623]: USER_ACCT pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.456290 sshd[5623]: Accepted publickey for core from 10.0.0.1 port 50016 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:32:10.458167 sshd[5623]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:10.456000 audit[5623]: CRED_ACQ pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.461692 systemd-logind[1193]: New session 23 of user core. Jul 15 11:32:10.462451 systemd[1]: Started session-23.scope. Jul 15 11:32:10.463839 kernel: audit: type=1101 audit(1752579130.454:1623): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.463909 kernel: audit: type=1103 audit(1752579130.456:1624): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.463936 kernel: audit: type=1006 audit(1752579130.456:1625): pid=5623 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 15 11:32:10.456000 audit[5623]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe07c17970 a2=3 a3=0 items=0 ppid=1 pid=5623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.456000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:10.464000 audit[5623]: USER_START pid=5623 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.466000 audit[5625]: CRED_ACQ pid=5625 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.568469 sshd[5623]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:10.567000 audit[5623]: USER_END pid=5623 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.568000 audit[5623]: CRED_DISP pid=5623 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.56:22-10.0.0.1:50016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:10.571081 systemd[1]: sshd@22-10.0.0.56:22-10.0.0.1:50016.service: Deactivated successfully. Jul 15 11:32:10.571769 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:32:10.572296 systemd-logind[1193]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:32:10.572919 systemd-logind[1193]: Removed session 23. Jul 15 11:32:12.985494 kubelet[1962]: E0715 11:32:12.985431 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:15.572547 systemd[1]: Started sshd@23-10.0.0.56:22-10.0.0.1:50026.service. Jul 15 11:32:15.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.56:22-10.0.0.1:50026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.573785 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:32:15.573855 kernel: audit: type=1130 audit(1752579135.571:1631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.56:22-10.0.0.1:50026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.605000 audit[5680]: USER_ACCT pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.606272 sshd[5680]: Accepted publickey for core from 10.0.0.1 port 50026 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:32:15.608149 sshd[5680]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:15.607000 audit[5680]: CRED_ACQ pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.612258 systemd-logind[1193]: New session 24 of user core. Jul 15 11:32:15.613246 systemd[1]: Started session-24.scope. Jul 15 11:32:15.615297 kernel: audit: type=1101 audit(1752579135.605:1632): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.615349 kernel: audit: type=1103 audit(1752579135.607:1633): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.615367 kernel: audit: type=1006 audit(1752579135.607:1634): pid=5680 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 15 11:32:15.607000 audit[5680]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe47e34b00 a2=3 a3=0 items=0 ppid=1 pid=5680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.621867 kernel: audit: type=1300 audit(1752579135.607:1634): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe47e34b00 a2=3 a3=0 items=0 ppid=1 pid=5680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.621922 kernel: audit: type=1327 audit(1752579135.607:1634): proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:15.607000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:15.623289 kernel: audit: type=1105 audit(1752579135.616:1635): pid=5680 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.616000 audit[5680]: USER_START pid=5680 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.618000 audit[5682]: CRED_ACQ pid=5682 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.630650 kernel: audit: type=1103 audit(1752579135.618:1636): pid=5682 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.726466 sshd[5680]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:15.726000 audit[5680]: USER_END pid=5680 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.728744 systemd[1]: sshd@23-10.0.0.56:22-10.0.0.1:50026.service: Deactivated successfully. Jul 15 11:32:15.729408 systemd[1]: session-24.scope: Deactivated successfully. Jul 15 11:32:15.726000 audit[5680]: CRED_DISP pid=5680 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.734278 systemd-logind[1193]: Session 24 logged out. Waiting for processes to exit. Jul 15 11:32:15.734973 systemd-logind[1193]: Removed session 24. Jul 15 11:32:15.736172 kernel: audit: type=1106 audit(1752579135.726:1637): pid=5680 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.736236 kernel: audit: type=1104 audit(1752579135.726:1638): pid=5680 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:15.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.56:22-10.0.0.1:50026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'