Jul 15 11:31:41.843366 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Jul 15 10:04:37 -00 2025 Jul 15 11:31:41.843389 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:31:41.843400 kernel: BIOS-provided physical RAM map: Jul 15 11:31:41.843408 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 15 11:31:41.843414 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 15 11:31:41.843421 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 15 11:31:41.843429 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Jul 15 11:31:41.843436 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 15 11:31:41.843443 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 15 11:31:41.843451 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 15 11:31:41.843458 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Jul 15 11:31:41.843465 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 15 11:31:41.843472 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 15 11:31:41.843479 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 15 11:31:41.843489 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 15 11:31:41.843499 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 15 11:31:41.843507 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 15 11:31:41.843515 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 15 11:31:41.843523 kernel: NX (Execute Disable) protection: active Jul 15 11:31:41.843531 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 15 11:31:41.843539 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 15 11:31:41.843547 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 15 11:31:41.843555 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 15 11:31:41.843563 kernel: extended physical RAM map: Jul 15 11:31:41.843571 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 15 11:31:41.843580 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 15 11:31:41.843588 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 15 11:31:41.843595 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Jul 15 11:31:41.843603 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 15 11:31:41.843611 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 15 11:31:41.843619 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 15 11:31:41.843637 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b438017] usable Jul 15 11:31:41.843645 kernel: reserve setup_data: [mem 0x000000009b438018-0x000000009b474e57] usable Jul 15 11:31:41.843654 kernel: reserve setup_data: [mem 0x000000009b474e58-0x000000009b475017] usable Jul 15 11:31:41.843662 kernel: reserve setup_data: [mem 0x000000009b475018-0x000000009b47ec57] usable Jul 15 11:31:41.843670 kernel: reserve setup_data: [mem 0x000000009b47ec58-0x000000009c8eefff] usable Jul 15 11:31:41.843681 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 15 11:31:41.843690 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 15 11:31:41.843698 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 15 11:31:41.843706 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 15 11:31:41.843718 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 15 11:31:41.843727 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 15 11:31:41.843736 kernel: reserve setup_data: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 15 11:31:41.843747 kernel: efi: EFI v2.70 by EDK II Jul 15 11:31:41.843756 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b673018 RNG=0x9cb73018 Jul 15 11:31:41.843765 kernel: random: crng init done Jul 15 11:31:41.843786 kernel: SMBIOS 2.8 present. Jul 15 11:31:41.843796 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Jul 15 11:31:41.843804 kernel: Hypervisor detected: KVM Jul 15 11:31:41.843813 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 15 11:31:41.843822 kernel: kvm-clock: cpu 0, msr 1c19b001, primary cpu clock Jul 15 11:31:41.843831 kernel: kvm-clock: using sched offset of 3914600445 cycles Jul 15 11:31:41.843844 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 15 11:31:41.843853 kernel: tsc: Detected 2794.750 MHz processor Jul 15 11:31:41.843862 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 15 11:31:41.843871 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 15 11:31:41.843880 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Jul 15 11:31:41.843889 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 15 11:31:41.843898 kernel: Using GB pages for direct mapping Jul 15 11:31:41.843907 kernel: Secure boot disabled Jul 15 11:31:41.843917 kernel: ACPI: Early table checksum verification disabled Jul 15 11:31:41.843928 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Jul 15 11:31:41.843937 kernel: ACPI: XSDT 0x000000009CB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Jul 15 11:31:41.843946 kernel: ACPI: FACP 0x000000009CB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:31:41.843956 kernel: ACPI: DSDT 0x000000009CB7A000 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:31:41.843965 kernel: ACPI: FACS 0x000000009CBDD000 000040 Jul 15 11:31:41.843974 kernel: ACPI: APIC 0x000000009CB78000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:31:41.843983 kernel: ACPI: HPET 0x000000009CB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:31:41.843992 kernel: ACPI: MCFG 0x000000009CB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:31:41.844001 kernel: ACPI: WAET 0x000000009CB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:31:41.844012 kernel: ACPI: BGRT 0x000000009CB74000 000038 (v01 INTEL EDK2 00000002 01000013) Jul 15 11:31:41.844022 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb79000-0x9cb790f3] Jul 15 11:31:41.844031 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7a000-0x9cb7c1b9] Jul 15 11:31:41.844040 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Jul 15 11:31:41.844049 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb78000-0x9cb7808f] Jul 15 11:31:41.844058 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb77000-0x9cb77037] Jul 15 11:31:41.844067 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cb76000-0x9cb7603b] Jul 15 11:31:41.844076 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb75000-0x9cb75027] Jul 15 11:31:41.844085 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb74000-0x9cb74037] Jul 15 11:31:41.844096 kernel: No NUMA configuration found Jul 15 11:31:41.844105 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Jul 15 11:31:41.844114 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Jul 15 11:31:41.844123 kernel: Zone ranges: Jul 15 11:31:41.844132 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 15 11:31:41.844141 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Jul 15 11:31:41.844150 kernel: Normal empty Jul 15 11:31:41.844159 kernel: Movable zone start for each node Jul 15 11:31:41.844168 kernel: Early memory node ranges Jul 15 11:31:41.844179 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Jul 15 11:31:41.844189 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Jul 15 11:31:41.844198 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Jul 15 11:31:41.844207 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Jul 15 11:31:41.844216 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Jul 15 11:31:41.844225 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Jul 15 11:31:41.844234 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Jul 15 11:31:41.844243 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:31:41.844252 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Jul 15 11:31:41.844261 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Jul 15 11:31:41.844272 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:31:41.844281 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Jul 15 11:31:41.844291 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Jul 15 11:31:41.844300 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Jul 15 11:31:41.844309 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 15 11:31:41.844318 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 15 11:31:41.844327 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 15 11:31:41.844336 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 15 11:31:41.844345 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 15 11:31:41.844357 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 15 11:31:41.844366 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 15 11:31:41.844375 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 15 11:31:41.844384 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 15 11:31:41.844393 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 15 11:31:41.844402 kernel: TSC deadline timer available Jul 15 11:31:41.844411 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 15 11:31:41.844420 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 15 11:31:41.844429 kernel: kvm-guest: setup PV sched yield Jul 15 11:31:41.844441 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Jul 15 11:31:41.844450 kernel: Booting paravirtualized kernel on KVM Jul 15 11:31:41.844465 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 15 11:31:41.844477 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 15 11:31:41.844486 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 15 11:31:41.844495 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 15 11:31:41.844504 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 15 11:31:41.844513 kernel: kvm-guest: setup async PF for cpu 0 Jul 15 11:31:41.844522 kernel: kvm-guest: stealtime: cpu 0, msr 9b21c0c0 Jul 15 11:31:41.844532 kernel: kvm-guest: PV spinlocks enabled Jul 15 11:31:41.844540 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 15 11:31:41.844550 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Jul 15 11:31:41.844561 kernel: Policy zone: DMA32 Jul 15 11:31:41.844572 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:31:41.844583 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:31:41.844592 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 15 11:31:41.844603 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:31:41.844613 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:31:41.844633 kernel: Memory: 2397432K/2567000K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 169308K reserved, 0K cma-reserved) Jul 15 11:31:41.844643 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 15 11:31:41.844652 kernel: ftrace: allocating 34607 entries in 136 pages Jul 15 11:31:41.844663 kernel: ftrace: allocated 136 pages with 2 groups Jul 15 11:31:41.844672 kernel: rcu: Hierarchical RCU implementation. Jul 15 11:31:41.844683 kernel: rcu: RCU event tracing is enabled. Jul 15 11:31:41.844693 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 15 11:31:41.844705 kernel: Rude variant of Tasks RCU enabled. Jul 15 11:31:41.844715 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:31:41.844725 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:31:41.844735 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 15 11:31:41.844745 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 15 11:31:41.844755 kernel: Console: colour dummy device 80x25 Jul 15 11:31:41.844765 kernel: printk: console [ttyS0] enabled Jul 15 11:31:41.844788 kernel: ACPI: Core revision 20210730 Jul 15 11:31:41.844797 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 15 11:31:41.844810 kernel: APIC: Switch to symmetric I/O mode setup Jul 15 11:31:41.844819 kernel: x2apic enabled Jul 15 11:31:41.844829 kernel: Switched APIC routing to physical x2apic. Jul 15 11:31:41.844840 kernel: kvm-guest: setup PV IPIs Jul 15 11:31:41.844850 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 15 11:31:41.844860 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 15 11:31:41.844870 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Jul 15 11:31:41.844879 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 15 11:31:41.844889 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 15 11:31:41.844901 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 15 11:31:41.844911 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 15 11:31:41.844921 kernel: Spectre V2 : Mitigation: Retpolines Jul 15 11:31:41.844931 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 15 11:31:41.844941 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 15 11:31:41.844950 kernel: RETBleed: Mitigation: untrained return thunk Jul 15 11:31:41.844960 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 15 11:31:41.844970 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 15 11:31:41.844980 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 15 11:31:41.844992 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 15 11:31:41.845002 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 15 11:31:41.845011 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 15 11:31:41.845021 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 15 11:31:41.845031 kernel: Freeing SMP alternatives memory: 32K Jul 15 11:31:41.845041 kernel: pid_max: default: 32768 minimum: 301 Jul 15 11:31:41.845050 kernel: LSM: Security Framework initializing Jul 15 11:31:41.845060 kernel: SELinux: Initializing. Jul 15 11:31:41.845070 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:31:41.845081 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:31:41.845092 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 15 11:31:41.845101 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 15 11:31:41.845111 kernel: ... version: 0 Jul 15 11:31:41.845121 kernel: ... bit width: 48 Jul 15 11:31:41.845130 kernel: ... generic registers: 6 Jul 15 11:31:41.845140 kernel: ... value mask: 0000ffffffffffff Jul 15 11:31:41.845150 kernel: ... max period: 00007fffffffffff Jul 15 11:31:41.845160 kernel: ... fixed-purpose events: 0 Jul 15 11:31:41.845171 kernel: ... event mask: 000000000000003f Jul 15 11:31:41.845181 kernel: signal: max sigframe size: 1776 Jul 15 11:31:41.845191 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:31:41.845201 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:31:41.845210 kernel: x86: Booting SMP configuration: Jul 15 11:31:41.845220 kernel: .... node #0, CPUs: #1 Jul 15 11:31:41.845229 kernel: kvm-clock: cpu 1, msr 1c19b041, secondary cpu clock Jul 15 11:31:41.845239 kernel: kvm-guest: setup async PF for cpu 1 Jul 15 11:31:41.845248 kernel: kvm-guest: stealtime: cpu 1, msr 9b29c0c0 Jul 15 11:31:41.845259 kernel: #2 Jul 15 11:31:41.845286 kernel: kvm-clock: cpu 2, msr 1c19b081, secondary cpu clock Jul 15 11:31:41.845313 kernel: kvm-guest: setup async PF for cpu 2 Jul 15 11:31:41.845326 kernel: kvm-guest: stealtime: cpu 2, msr 9b31c0c0 Jul 15 11:31:41.845335 kernel: #3 Jul 15 11:31:41.845345 kernel: kvm-clock: cpu 3, msr 1c19b0c1, secondary cpu clock Jul 15 11:31:41.845355 kernel: kvm-guest: setup async PF for cpu 3 Jul 15 11:31:41.845364 kernel: kvm-guest: stealtime: cpu 3, msr 9b39c0c0 Jul 15 11:31:41.845374 kernel: smp: Brought up 1 node, 4 CPUs Jul 15 11:31:41.845384 kernel: smpboot: Max logical packages: 1 Jul 15 11:31:41.845396 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Jul 15 11:31:41.845405 kernel: devtmpfs: initialized Jul 15 11:31:41.845415 kernel: x86/mm: Memory block size: 128MB Jul 15 11:31:41.845425 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Jul 15 11:31:41.845435 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Jul 15 11:31:41.845445 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Jul 15 11:31:41.845454 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Jul 15 11:31:41.845464 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Jul 15 11:31:41.845482 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:31:41.845504 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 15 11:31:41.845513 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:31:41.845523 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:31:41.845533 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:31:41.845542 kernel: audit: type=2000 audit(1752579101.774:1): state=initialized audit_enabled=0 res=1 Jul 15 11:31:41.845552 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:31:41.845562 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 15 11:31:41.845571 kernel: cpuidle: using governor menu Jul 15 11:31:41.845581 kernel: ACPI: bus type PCI registered Jul 15 11:31:41.845593 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:31:41.845603 kernel: dca service started, version 1.12.1 Jul 15 11:31:41.845613 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 15 11:31:41.845630 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 15 11:31:41.845640 kernel: PCI: Using configuration type 1 for base access Jul 15 11:31:41.845650 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 15 11:31:41.845660 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:31:41.845670 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:31:41.845684 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:31:41.845695 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:31:41.845707 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:31:41.845716 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:31:41.845726 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:31:41.845735 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:31:41.845745 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:31:41.845754 kernel: ACPI: Interpreter enabled Jul 15 11:31:41.845764 kernel: ACPI: PM: (supports S0 S3 S5) Jul 15 11:31:41.845793 kernel: ACPI: Using IOAPIC for interrupt routing Jul 15 11:31:41.845805 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 15 11:31:41.845815 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 15 11:31:41.845824 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 15 11:31:41.845971 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:31:41.846071 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 15 11:31:41.846167 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 15 11:31:41.846180 kernel: PCI host bridge to bus 0000:00 Jul 15 11:31:41.846280 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 15 11:31:41.846367 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 15 11:31:41.846453 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 15 11:31:41.846540 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 15 11:31:41.846686 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 15 11:31:41.846801 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window] Jul 15 11:31:41.846899 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 15 11:31:41.847023 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 15 11:31:41.847132 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 15 11:31:41.847234 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Jul 15 11:31:41.847338 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xc1044000-0xc1044fff] Jul 15 11:31:41.847434 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Jul 15 11:31:41.847524 kernel: pci 0000:00:01.0: BAR 0: assigned to efifb Jul 15 11:31:41.847619 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 15 11:31:41.847738 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 15 11:31:41.847872 kernel: pci 0000:00:02.0: reg 0x10: [io 0x6100-0x611f] Jul 15 11:31:41.847966 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xc1043000-0xc1043fff] Jul 15 11:31:41.848059 kernel: pci 0000:00:02.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Jul 15 11:31:41.848158 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 15 11:31:41.848251 kernel: pci 0000:00:03.0: reg 0x10: [io 0x6000-0x607f] Jul 15 11:31:41.848348 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Jul 15 11:31:41.848442 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Jul 15 11:31:41.848537 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 15 11:31:41.848636 kernel: pci 0000:00:04.0: reg 0x10: [io 0x60e0-0x60ff] Jul 15 11:31:41.848727 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Jul 15 11:31:41.848833 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Jul 15 11:31:41.848925 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Jul 15 11:31:41.849024 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 15 11:31:41.849114 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 15 11:31:41.849210 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 15 11:31:41.849298 kernel: pci 0000:00:1f.2: reg 0x20: [io 0x60c0-0x60df] Jul 15 11:31:41.849387 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xc1040000-0xc1040fff] Jul 15 11:31:41.849485 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 15 11:31:41.849579 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x6080-0x60bf] Jul 15 11:31:41.849590 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 15 11:31:41.849599 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 15 11:31:41.849607 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 15 11:31:41.849615 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 15 11:31:41.849633 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 15 11:31:41.849642 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 15 11:31:41.849650 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 15 11:31:41.849659 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 15 11:31:41.849670 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 15 11:31:41.849678 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 15 11:31:41.849687 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 15 11:31:41.849694 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 15 11:31:41.849700 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 15 11:31:41.849707 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 15 11:31:41.849714 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 15 11:31:41.849721 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 15 11:31:41.849728 kernel: iommu: Default domain type: Translated Jul 15 11:31:41.849736 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 15 11:31:41.849821 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 15 11:31:41.849890 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 15 11:31:41.849955 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 15 11:31:41.849965 kernel: vgaarb: loaded Jul 15 11:31:41.849971 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:31:41.849979 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:31:41.849986 kernel: PTP clock support registered Jul 15 11:31:41.849992 kernel: Registered efivars operations Jul 15 11:31:41.850002 kernel: PCI: Using ACPI for IRQ routing Jul 15 11:31:41.850009 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 15 11:31:41.850016 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Jul 15 11:31:41.850023 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Jul 15 11:31:41.850029 kernel: e820: reserve RAM buffer [mem 0x9b438018-0x9bffffff] Jul 15 11:31:41.850036 kernel: e820: reserve RAM buffer [mem 0x9b475018-0x9bffffff] Jul 15 11:31:41.850042 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Jul 15 11:31:41.850049 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Jul 15 11:31:41.850057 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 15 11:31:41.850064 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 15 11:31:41.850071 kernel: clocksource: Switched to clocksource kvm-clock Jul 15 11:31:41.850078 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:31:41.850085 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:31:41.850092 kernel: pnp: PnP ACPI init Jul 15 11:31:41.850164 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 15 11:31:41.850175 kernel: pnp: PnP ACPI: found 6 devices Jul 15 11:31:41.850182 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 15 11:31:41.850191 kernel: NET: Registered PF_INET protocol family Jul 15 11:31:41.850198 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 15 11:31:41.850205 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 15 11:31:41.850212 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:31:41.850218 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:31:41.850225 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 15 11:31:41.850232 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 15 11:31:41.850239 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:31:41.850247 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:31:41.850254 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:31:41.850261 kernel: NET: Registered PF_XDP protocol family Jul 15 11:31:41.850329 kernel: pci 0000:00:04.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Jul 15 11:31:41.850396 kernel: pci 0000:00:04.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Jul 15 11:31:41.850458 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 15 11:31:41.850517 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 15 11:31:41.850576 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 15 11:31:41.850648 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 15 11:31:41.850707 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 15 11:31:41.850766 kernel: pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window] Jul 15 11:31:41.850793 kernel: PCI: CLS 0 bytes, default 64 Jul 15 11:31:41.850800 kernel: Initialise system trusted keyrings Jul 15 11:31:41.850807 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 15 11:31:41.850814 kernel: Key type asymmetric registered Jul 15 11:31:41.850821 kernel: Asymmetric key parser 'x509' registered Jul 15 11:31:41.850827 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:31:41.850837 kernel: io scheduler mq-deadline registered Jul 15 11:31:41.850844 kernel: io scheduler kyber registered Jul 15 11:31:41.850859 kernel: io scheduler bfq registered Jul 15 11:31:41.850868 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 15 11:31:41.850875 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 15 11:31:41.850883 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 15 11:31:41.850890 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 15 11:31:41.850897 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:31:41.850904 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 15 11:31:41.850913 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 15 11:31:41.850920 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 15 11:31:41.850927 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 15 11:31:41.851005 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 15 11:31:41.851015 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 15 11:31:41.851107 kernel: rtc_cmos 00:04: registered as rtc0 Jul 15 11:31:41.851194 kernel: rtc_cmos 00:04: setting system clock to 2025-07-15T11:31:41 UTC (1752579101) Jul 15 11:31:41.851296 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 15 11:31:41.851310 kernel: efifb: probing for efifb Jul 15 11:31:41.851317 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Jul 15 11:31:41.851324 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Jul 15 11:31:41.851332 kernel: efifb: scrolling: redraw Jul 15 11:31:41.851339 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jul 15 11:31:41.851346 kernel: Console: switching to colour frame buffer device 160x50 Jul 15 11:31:41.851353 kernel: fb0: EFI VGA frame buffer device Jul 15 11:31:41.851360 kernel: pstore: Registered efi as persistent store backend Jul 15 11:31:41.851368 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:31:41.851376 kernel: Segment Routing with IPv6 Jul 15 11:31:41.851383 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:31:41.851390 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:31:41.851399 kernel: Key type dns_resolver registered Jul 15 11:31:41.851406 kernel: IPI shorthand broadcast: enabled Jul 15 11:31:41.851413 kernel: sched_clock: Marking stable (404317811, 122036774)->(570202656, -43848071) Jul 15 11:31:41.851422 kernel: registered taskstats version 1 Jul 15 11:31:41.851429 kernel: Loading compiled-in X.509 certificates Jul 15 11:31:41.851437 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: c4b3a19d3bd6de5654dc12075428550cf6251289' Jul 15 11:31:41.851444 kernel: Key type .fscrypt registered Jul 15 11:31:41.851451 kernel: Key type fscrypt-provisioning registered Jul 15 11:31:41.851458 kernel: pstore: Using crash dump compression: deflate Jul 15 11:31:41.851465 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:31:41.851473 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:31:41.851481 kernel: ima: No architecture policies found Jul 15 11:31:41.851488 kernel: clk: Disabling unused clocks Jul 15 11:31:41.851495 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 15 11:31:41.851504 kernel: Write protecting the kernel read-only data: 28672k Jul 15 11:31:41.851511 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 15 11:31:41.851519 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 15 11:31:41.851526 kernel: Run /init as init process Jul 15 11:31:41.851533 kernel: with arguments: Jul 15 11:31:41.851540 kernel: /init Jul 15 11:31:41.851547 kernel: with environment: Jul 15 11:31:41.851555 kernel: HOME=/ Jul 15 11:31:41.851562 kernel: TERM=linux Jul 15 11:31:41.851569 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:31:41.851578 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:31:41.851587 systemd[1]: Detected virtualization kvm. Jul 15 11:31:41.851595 systemd[1]: Detected architecture x86-64. Jul 15 11:31:41.851603 systemd[1]: Running in initrd. Jul 15 11:31:41.851612 systemd[1]: No hostname configured, using default hostname. Jul 15 11:31:41.851628 systemd[1]: Hostname set to . Jul 15 11:31:41.851638 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:31:41.851645 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:31:41.851653 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:31:41.851660 systemd[1]: Reached target cryptsetup.target. Jul 15 11:31:41.851668 systemd[1]: Reached target paths.target. Jul 15 11:31:41.851676 systemd[1]: Reached target slices.target. Jul 15 11:31:41.851683 systemd[1]: Reached target swap.target. Jul 15 11:31:41.851692 systemd[1]: Reached target timers.target. Jul 15 11:31:41.851700 systemd[1]: Listening on iscsid.socket. Jul 15 11:31:41.851708 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:31:41.851716 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:31:41.851724 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:31:41.851731 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:31:41.851739 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:31:41.851748 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:31:41.851755 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:31:41.851763 systemd[1]: Reached target sockets.target. Jul 15 11:31:41.851782 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:31:41.851790 systemd[1]: Finished network-cleanup.service. Jul 15 11:31:41.851798 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:31:41.851806 systemd[1]: Starting systemd-journald.service... Jul 15 11:31:41.851813 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:31:41.851821 systemd[1]: Starting systemd-resolved.service... Jul 15 11:31:41.851830 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:31:41.851838 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:31:41.851845 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:31:41.851853 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:31:41.851861 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:31:41.851869 kernel: audit: type=1130 audit(1752579101.847:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.851876 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:31:41.851887 systemd-journald[196]: Journal started Jul 15 11:31:41.851924 systemd-journald[196]: Runtime Journal (/run/log/journal/e3579dda4baa479f850fe531c8876cef) is 6.0M, max 48.4M, 42.4M free. Jul 15 11:31:41.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.845507 systemd-modules-load[197]: Inserted module 'overlay' Jul 15 11:31:41.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.856797 kernel: audit: type=1130 audit(1752579101.852:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.856819 systemd[1]: Started systemd-journald.service. Jul 15 11:31:41.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.858721 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:31:41.862223 kernel: audit: type=1130 audit(1752579101.857:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.870791 systemd-resolved[198]: Positive Trust Anchors: Jul 15 11:31:41.870808 systemd-resolved[198]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:31:41.870836 systemd-resolved[198]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:31:41.874045 systemd-resolved[198]: Defaulting to hostname 'linux'. Jul 15 11:31:41.874723 systemd[1]: Started systemd-resolved.service. Jul 15 11:31:41.880509 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:31:41.882064 systemd[1]: Reached target nss-lookup.target. Jul 15 11:31:41.891926 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:31:41.891943 kernel: audit: type=1130 audit(1752579101.878:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.891953 kernel: audit: type=1130 audit(1752579101.881:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.891962 kernel: Bridge firewalling registered Jul 15 11:31:41.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.890640 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:31:41.891233 systemd-modules-load[197]: Inserted module 'br_netfilter' Jul 15 11:31:41.898378 dracut-cmdline[215]: dracut-dracut-053 Jul 15 11:31:41.900176 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:31:41.908797 kernel: SCSI subsystem initialized Jul 15 11:31:41.920813 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:31:41.920845 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:31:41.920856 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:31:41.923398 systemd-modules-load[197]: Inserted module 'dm_multipath' Jul 15 11:31:41.924145 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:31:41.929289 kernel: audit: type=1130 audit(1752579101.924:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.925674 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:31:41.933765 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:31:41.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.938797 kernel: audit: type=1130 audit(1752579101.934:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:41.957795 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:31:41.972796 kernel: iscsi: registered transport (tcp) Jul 15 11:31:41.994077 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:31:41.994103 kernel: QLogic iSCSI HBA Driver Jul 15 11:31:42.022633 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:31:42.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:42.024750 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:31:42.028224 kernel: audit: type=1130 audit(1752579102.023:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:42.069800 kernel: raid6: avx2x4 gen() 30896 MB/s Jul 15 11:31:42.086794 kernel: raid6: avx2x4 xor() 8233 MB/s Jul 15 11:31:42.103791 kernel: raid6: avx2x2 gen() 32668 MB/s Jul 15 11:31:42.120802 kernel: raid6: avx2x2 xor() 19101 MB/s Jul 15 11:31:42.137798 kernel: raid6: avx2x1 gen() 26431 MB/s Jul 15 11:31:42.154797 kernel: raid6: avx2x1 xor() 15322 MB/s Jul 15 11:31:42.171789 kernel: raid6: sse2x4 gen() 14822 MB/s Jul 15 11:31:42.188792 kernel: raid6: sse2x4 xor() 7557 MB/s Jul 15 11:31:42.205789 kernel: raid6: sse2x2 gen() 16476 MB/s Jul 15 11:31:42.222800 kernel: raid6: sse2x2 xor() 9800 MB/s Jul 15 11:31:42.239793 kernel: raid6: sse2x1 gen() 12493 MB/s Jul 15 11:31:42.257119 kernel: raid6: sse2x1 xor() 7819 MB/s Jul 15 11:31:42.257137 kernel: raid6: using algorithm avx2x2 gen() 32668 MB/s Jul 15 11:31:42.257147 kernel: raid6: .... xor() 19101 MB/s, rmw enabled Jul 15 11:31:42.257798 kernel: raid6: using avx2x2 recovery algorithm Jul 15 11:31:42.269791 kernel: xor: automatically using best checksumming function avx Jul 15 11:31:42.358806 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 15 11:31:42.366690 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:31:42.370958 kernel: audit: type=1130 audit(1752579102.365:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:42.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:42.370000 audit: BPF prog-id=7 op=LOAD Jul 15 11:31:42.370000 audit: BPF prog-id=8 op=LOAD Jul 15 11:31:42.371288 systemd[1]: Starting systemd-udevd.service... Jul 15 11:31:42.383148 systemd-udevd[398]: Using default interface naming scheme 'v252'. Jul 15 11:31:42.387766 systemd[1]: Started systemd-udevd.service. Jul 15 11:31:42.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:42.388734 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:31:42.398187 dracut-pre-trigger[399]: rd.md=0: removing MD RAID activation Jul 15 11:31:42.421670 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:31:42.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:42.423335 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:31:42.453382 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:31:42.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:42.480176 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 15 11:31:42.486830 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 15 11:31:42.486843 kernel: GPT:9289727 != 19775487 Jul 15 11:31:42.486851 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 15 11:31:42.486860 kernel: GPT:9289727 != 19775487 Jul 15 11:31:42.486868 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 15 11:31:42.486877 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:31:42.493796 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:31:42.504792 kernel: libata version 3.00 loaded. Jul 15 11:31:42.504817 kernel: AVX2 version of gcm_enc/dec engaged. Jul 15 11:31:42.505793 kernel: AES CTR mode by8 optimization enabled Jul 15 11:31:42.513130 kernel: ahci 0000:00:1f.2: version 3.0 Jul 15 11:31:42.540318 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 15 11:31:42.540334 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 15 11:31:42.540421 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 15 11:31:42.540500 kernel: scsi host0: ahci Jul 15 11:31:42.540596 kernel: scsi host1: ahci Jul 15 11:31:42.540706 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (442) Jul 15 11:31:42.540716 kernel: scsi host2: ahci Jul 15 11:31:42.540816 kernel: scsi host3: ahci Jul 15 11:31:42.540904 kernel: scsi host4: ahci Jul 15 11:31:42.540987 kernel: scsi host5: ahci Jul 15 11:31:42.541071 kernel: ata1: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040100 irq 34 Jul 15 11:31:42.541081 kernel: ata2: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040180 irq 34 Jul 15 11:31:42.541092 kernel: ata3: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040200 irq 34 Jul 15 11:31:42.541100 kernel: ata4: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040280 irq 34 Jul 15 11:31:42.541109 kernel: ata5: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040300 irq 34 Jul 15 11:31:42.541118 kernel: ata6: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040380 irq 34 Jul 15 11:31:42.531645 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:31:42.533080 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:31:42.539911 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:31:42.558099 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:31:42.562798 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:31:42.567569 systemd[1]: Starting disk-uuid.service... Jul 15 11:31:42.575491 disk-uuid[537]: Primary Header is updated. Jul 15 11:31:42.575491 disk-uuid[537]: Secondary Entries is updated. Jul 15 11:31:42.575491 disk-uuid[537]: Secondary Header is updated. Jul 15 11:31:42.579803 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:31:42.582805 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:31:42.849094 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 15 11:31:42.849168 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 15 11:31:42.849178 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 15 11:31:42.850807 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 15 11:31:42.851803 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 15 11:31:42.852810 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 15 11:31:42.852843 kernel: ata3.00: applying bridge limits Jul 15 11:31:42.853972 kernel: ata3.00: configured for UDMA/100 Jul 15 11:31:42.854804 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 15 11:31:42.858798 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 15 11:31:42.885849 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 15 11:31:42.903433 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 15 11:31:42.903445 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 15 11:31:43.583795 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:31:43.584323 disk-uuid[538]: The operation has completed successfully. Jul 15 11:31:43.604188 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:31:43.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.604268 systemd[1]: Finished disk-uuid.service. Jul 15 11:31:43.611055 systemd[1]: Starting verity-setup.service... Jul 15 11:31:43.622797 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 15 11:31:43.640795 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:31:43.643555 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:31:43.645301 systemd[1]: Finished verity-setup.service. Jul 15 11:31:43.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.701793 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:31:43.701953 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:31:43.703386 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 15 11:31:43.705241 systemd[1]: Starting ignition-setup.service... Jul 15 11:31:43.707153 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:31:43.712956 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:31:43.712979 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:31:43.712991 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:31:43.720991 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:31:43.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.728127 systemd[1]: Finished ignition-setup.service. Jul 15 11:31:43.729548 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:31:43.766012 ignition[641]: Ignition 2.14.0 Jul 15 11:31:43.766024 ignition[641]: Stage: fetch-offline Jul 15 11:31:43.766106 ignition[641]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:31:43.766116 ignition[641]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:31:43.766212 ignition[641]: parsed url from cmdline: "" Jul 15 11:31:43.766215 ignition[641]: no config URL provided Jul 15 11:31:43.766221 ignition[641]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:31:43.766228 ignition[641]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:31:43.766242 ignition[641]: op(1): [started] loading QEMU firmware config module Jul 15 11:31:43.766247 ignition[641]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 15 11:31:43.769757 ignition[641]: op(1): [finished] loading QEMU firmware config module Jul 15 11:31:43.778986 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:31:43.781330 systemd[1]: Starting systemd-networkd.service... Jul 15 11:31:43.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.780000 audit: BPF prog-id=9 op=LOAD Jul 15 11:31:43.814391 ignition[641]: parsing config with SHA512: aee7a165d6bcfc807e6f0f262924a84b59050316746954f6243904d7369ba412312e71ece277dab8f13dda5f960bfeaa36382176363f4499cfb45ecc68d45d9d Jul 15 11:31:43.820574 unknown[641]: fetched base config from "system" Jul 15 11:31:43.820587 unknown[641]: fetched user config from "qemu" Jul 15 11:31:43.822538 ignition[641]: fetch-offline: fetch-offline passed Jul 15 11:31:43.822610 ignition[641]: Ignition finished successfully Jul 15 11:31:43.824450 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:31:43.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.833870 systemd-networkd[720]: lo: Link UP Jul 15 11:31:43.833879 systemd-networkd[720]: lo: Gained carrier Jul 15 11:31:43.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.834253 systemd-networkd[720]: Enumeration completed Jul 15 11:31:43.834328 systemd[1]: Started systemd-networkd.service. Jul 15 11:31:43.834437 systemd-networkd[720]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:31:43.835422 systemd-networkd[720]: eth0: Link UP Jul 15 11:31:43.835425 systemd-networkd[720]: eth0: Gained carrier Jul 15 11:31:43.835931 systemd[1]: Reached target network.target. Jul 15 11:31:43.837226 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:31:43.838012 systemd[1]: Starting ignition-kargs.service... Jul 15 11:31:43.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.838936 systemd[1]: Starting iscsiuio.service... Jul 15 11:31:43.842828 systemd[1]: Started iscsiuio.service. Jul 15 11:31:43.846206 systemd[1]: Starting iscsid.service... Jul 15 11:31:43.849334 iscsid[726]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:31:43.849334 iscsid[726]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:31:43.849334 iscsid[726]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:31:43.849334 iscsid[726]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:31:43.849334 iscsid[726]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:31:43.849334 iscsid[726]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:31:43.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.850854 systemd[1]: Started iscsid.service. Jul 15 11:31:43.857093 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:31:43.861865 systemd-networkd[720]: eth0: DHCPv4 address 10.0.0.85/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:31:43.867119 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:31:43.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.868885 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:31:43.870489 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:31:43.870650 ignition[722]: Ignition 2.14.0 Jul 15 11:31:43.870655 ignition[722]: Stage: kargs Jul 15 11:31:43.870739 ignition[722]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:31:43.872410 systemd[1]: Reached target remote-fs.target. Jul 15 11:31:43.870748 ignition[722]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:31:43.874458 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:31:43.871697 ignition[722]: kargs: kargs passed Jul 15 11:31:43.871732 ignition[722]: Ignition finished successfully Jul 15 11:31:43.880095 systemd[1]: Finished ignition-kargs.service. Jul 15 11:31:43.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.880992 systemd[1]: Starting ignition-disks.service... Jul 15 11:31:43.884490 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:31:43.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.890044 ignition[744]: Ignition 2.14.0 Jul 15 11:31:43.890057 ignition[744]: Stage: disks Jul 15 11:31:43.890152 ignition[744]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:31:43.890162 ignition[744]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:31:43.891096 ignition[744]: disks: disks passed Jul 15 11:31:43.891133 ignition[744]: Ignition finished successfully Jul 15 11:31:43.895056 systemd[1]: Finished ignition-disks.service. Jul 15 11:31:43.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.896624 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:31:43.897052 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:31:43.897356 systemd[1]: Reached target local-fs.target. Jul 15 11:31:43.900106 systemd[1]: Reached target sysinit.target. Jul 15 11:31:43.901262 systemd[1]: Reached target basic.target. Jul 15 11:31:43.903528 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:31:43.914748 systemd-fsck[753]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 15 11:31:43.919416 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:31:43.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.921067 systemd[1]: Mounting sysroot.mount... Jul 15 11:31:43.926794 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:31:43.927050 systemd[1]: Mounted sysroot.mount. Jul 15 11:31:43.927334 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:31:43.929856 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:31:43.930517 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:31:43.930548 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:31:43.930580 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:31:43.937686 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:31:43.938458 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:31:43.942884 initrd-setup-root[763]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:31:43.945881 initrd-setup-root[771]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:31:43.949348 initrd-setup-root[779]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:31:43.952279 initrd-setup-root[787]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:31:43.975231 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:31:43.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:43.977525 systemd[1]: Starting ignition-mount.service... Jul 15 11:31:43.978706 systemd[1]: Starting sysroot-boot.service... Jul 15 11:31:43.982167 bash[804]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:31:43.989959 ignition[805]: INFO : Ignition 2.14.0 Jul 15 11:31:43.990838 ignition[805]: INFO : Stage: mount Jul 15 11:31:43.990838 ignition[805]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:31:43.990838 ignition[805]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:31:43.993755 ignition[805]: INFO : mount: mount passed Jul 15 11:31:43.994484 ignition[805]: INFO : Ignition finished successfully Jul 15 11:31:43.994766 systemd[1]: Finished ignition-mount.service. Jul 15 11:31:43.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:44.000275 systemd[1]: Finished sysroot-boot.service. Jul 15 11:31:43.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:44.653011 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:31:44.660450 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (814) Jul 15 11:31:44.660497 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:31:44.660519 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:31:44.661331 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:31:44.666184 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:31:44.668146 systemd[1]: Starting ignition-files.service... Jul 15 11:31:44.686638 ignition[834]: INFO : Ignition 2.14.0 Jul 15 11:31:44.686638 ignition[834]: INFO : Stage: files Jul 15 11:31:44.688517 ignition[834]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:31:44.688517 ignition[834]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:31:44.688517 ignition[834]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:31:44.692476 ignition[834]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:31:44.692476 ignition[834]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:31:44.692476 ignition[834]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:31:44.692476 ignition[834]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:31:44.698148 ignition[834]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:31:44.698148 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 15 11:31:44.698148 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 15 11:31:44.692536 unknown[834]: wrote ssh authorized keys file for user: core Jul 15 11:31:44.745325 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:31:44.896112 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 15 11:31:44.896112 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:31:44.899976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Jul 15 11:31:45.721957 systemd-networkd[720]: eth0: Gained IPv6LL Jul 15 11:31:45.855429 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 15 11:31:46.240312 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:31:46.240312 ignition[834]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 15 11:31:46.243801 ignition[834]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:31:46.245596 ignition[834]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:31:46.245596 ignition[834]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 15 11:31:46.245596 ignition[834]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 15 11:31:46.249955 ignition[834]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:31:46.249955 ignition[834]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:31:46.249955 ignition[834]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 15 11:31:46.249955 ignition[834]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:31:46.249955 ignition[834]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:31:46.249955 ignition[834]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:31:46.249955 ignition[834]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:31:46.278275 ignition[834]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:31:46.279906 ignition[834]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:31:46.279906 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:31:46.279906 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:31:46.279906 ignition[834]: INFO : files: files passed Jul 15 11:31:46.279906 ignition[834]: INFO : Ignition finished successfully Jul 15 11:31:46.286820 systemd[1]: Finished ignition-files.service. Jul 15 11:31:46.292296 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 15 11:31:46.292317 kernel: audit: type=1130 audit(1752579106.286:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.292285 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:31:46.292700 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:31:46.293244 systemd[1]: Starting ignition-quench.service... Jul 15 11:31:46.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.295939 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:31:46.303490 kernel: audit: type=1130 audit(1752579106.296:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.303513 kernel: audit: type=1131 audit(1752579106.296:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.296013 systemd[1]: Finished ignition-quench.service. Jul 15 11:31:46.305257 initrd-setup-root-after-ignition[860]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 15 11:31:46.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.301312 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:31:46.312118 kernel: audit: type=1130 audit(1752579106.304:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.312132 initrd-setup-root-after-ignition[862]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:31:46.305133 systemd[1]: Reached target ignition-complete.target. Jul 15 11:31:46.307053 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:31:46.318076 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:31:46.318146 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:31:46.319805 systemd[1]: Reached target initrd-fs.target. Jul 15 11:31:46.327339 kernel: audit: type=1130 audit(1752579106.318:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.327354 kernel: audit: type=1131 audit(1752579106.318:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.321135 systemd[1]: Reached target initrd.target. Jul 15 11:31:46.327707 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:31:46.328272 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:31:46.337604 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:31:46.337000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.338589 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:31:46.343113 kernel: audit: type=1130 audit(1752579106.337:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.346678 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:31:46.346993 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:31:46.347329 systemd[1]: Stopped target timers.target. Jul 15 11:31:46.349905 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:31:46.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.349983 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:31:46.356843 kernel: audit: type=1131 audit(1752579106.349:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.350386 systemd[1]: Stopped target initrd.target. Jul 15 11:31:46.353720 systemd[1]: Stopped target basic.target. Jul 15 11:31:46.357271 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:31:46.357578 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:31:46.360101 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:31:46.361410 systemd[1]: Stopped target remote-fs.target. Jul 15 11:31:46.363035 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:31:46.364489 systemd[1]: Stopped target sysinit.target. Jul 15 11:31:46.366071 systemd[1]: Stopped target local-fs.target. Jul 15 11:31:46.367287 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:31:46.368640 systemd[1]: Stopped target swap.target. Jul 15 11:31:46.375016 kernel: audit: type=1131 audit(1752579106.369:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.369000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.370011 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:31:46.370090 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:31:46.380737 kernel: audit: type=1131 audit(1752579106.374:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.370386 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:31:46.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.375422 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:31:46.375508 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:31:46.375802 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:31:46.375880 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:31:46.381206 systemd[1]: Stopped target paths.target. Jul 15 11:31:46.381443 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:31:46.384829 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:31:46.385653 systemd[1]: Stopped target slices.target. Jul 15 11:31:46.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.387367 systemd[1]: Stopped target sockets.target. Jul 15 11:31:46.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.388663 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:31:46.388722 systemd[1]: Closed iscsid.socket. Jul 15 11:31:46.390322 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:31:46.390404 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:31:46.391715 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:31:46.391808 systemd[1]: Stopped ignition-files.service. Jul 15 11:31:46.393805 systemd[1]: Stopping ignition-mount.service... Jul 15 11:31:46.395469 systemd[1]: Stopping iscsiuio.service... Jul 15 11:31:46.402969 ignition[875]: INFO : Ignition 2.14.0 Jul 15 11:31:46.402969 ignition[875]: INFO : Stage: umount Jul 15 11:31:46.402969 ignition[875]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:31:46.402969 ignition[875]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:31:46.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.401480 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:31:46.409190 ignition[875]: INFO : umount: umount passed Jul 15 11:31:46.409190 ignition[875]: INFO : Ignition finished successfully Jul 15 11:31:46.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.402865 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:31:46.402958 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:31:46.405341 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:31:46.407529 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:31:46.416547 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:31:46.417863 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:31:46.418746 systemd[1]: Stopped iscsiuio.service. Jul 15 11:31:46.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.420539 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:31:46.421468 systemd[1]: Stopped ignition-mount.service. Jul 15 11:31:46.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.423214 systemd[1]: Stopped target network.target. Jul 15 11:31:46.424790 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:31:46.424819 systemd[1]: Closed iscsiuio.socket. Jul 15 11:31:46.426842 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:31:46.426879 systemd[1]: Stopped ignition-disks.service. Jul 15 11:31:46.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.429272 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:31:46.429305 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:31:46.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.431048 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:31:46.431808 systemd[1]: Stopped ignition-setup.service. Jul 15 11:31:46.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.434273 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:31:46.435978 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:31:46.437687 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:31:46.438612 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:31:46.439825 systemd-networkd[720]: eth0: DHCPv6 lease lost Jul 15 11:31:46.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.441159 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:31:46.442406 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:31:46.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.444802 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:31:46.445949 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:31:46.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.447000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:31:46.448801 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:31:46.449000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:31:46.448826 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:31:46.451795 systemd[1]: Stopping network-cleanup.service... Jul 15 11:31:46.453409 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:31:46.453448 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:31:46.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.456122 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:31:46.456155 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:31:46.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.458791 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:31:46.458823 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:31:46.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.461503 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:31:46.463708 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:31:46.467205 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:31:46.467342 systemd[1]: Stopped network-cleanup.service. Jul 15 11:31:46.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.469363 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:31:46.469514 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:31:46.470845 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:31:46.470886 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:31:46.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.472517 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:31:46.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.472547 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:31:46.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.474125 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:31:46.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.474167 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:31:46.475844 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:31:46.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.475875 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:31:46.477360 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:31:46.477394 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:31:46.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.478856 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:31:46.479923 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 15 11:31:46.479960 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 15 11:31:46.481543 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:31:46.481578 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:31:46.482351 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:31:46.482380 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:31:46.483916 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 15 11:31:46.484259 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:31:46.484328 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:31:46.485700 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:31:46.485757 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:31:46.487380 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:31:46.488868 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:31:46.488899 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:31:46.491095 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:31:46.506484 systemd[1]: Switching root. Jul 15 11:31:46.524351 iscsid[726]: iscsid shutting down. Jul 15 11:31:46.525049 systemd-journald[196]: Received SIGTERM from PID 1 (systemd). Jul 15 11:31:46.525086 systemd-journald[196]: Journal stopped Jul 15 11:31:49.087863 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:31:49.087915 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:31:49.087926 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:31:49.087936 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:31:49.087948 kernel: SELinux: policy capability open_perms=1 Jul 15 11:31:49.087957 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:31:49.087966 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:31:49.087981 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:31:49.087991 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:31:49.088000 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:31:49.088010 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:31:49.088020 systemd[1]: Successfully loaded SELinux policy in 37.995ms. Jul 15 11:31:49.088039 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.602ms. Jul 15 11:31:49.088052 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:31:49.088063 systemd[1]: Detected virtualization kvm. Jul 15 11:31:49.088075 systemd[1]: Detected architecture x86-64. Jul 15 11:31:49.088086 systemd[1]: Detected first boot. Jul 15 11:31:49.088096 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:31:49.088106 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:31:49.088116 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:31:49.088126 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:31:49.088141 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:31:49.088152 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:31:49.088165 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:31:49.088177 systemd[1]: Stopped iscsid.service. Jul 15 11:31:49.088187 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:31:49.088197 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:31:49.088207 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:31:49.088219 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:31:49.088229 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:31:49.088240 systemd[1]: Created slice system-getty.slice. Jul 15 11:31:49.088250 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:31:49.088260 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:31:49.088270 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:31:49.088281 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:31:49.088291 systemd[1]: Created slice user.slice. Jul 15 11:31:49.088301 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:31:49.088313 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:31:49.088323 systemd[1]: Set up automount boot.automount. Jul 15 11:31:49.088333 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:31:49.088343 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:31:49.088353 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:31:49.088363 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:31:49.088373 systemd[1]: Reached target integritysetup.target. Jul 15 11:31:49.088407 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:31:49.088425 systemd[1]: Reached target remote-fs.target. Jul 15 11:31:49.088436 systemd[1]: Reached target slices.target. Jul 15 11:31:49.088446 systemd[1]: Reached target swap.target. Jul 15 11:31:49.088457 systemd[1]: Reached target torcx.target. Jul 15 11:31:49.088467 systemd[1]: Reached target veritysetup.target. Jul 15 11:31:49.088574 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:31:49.088585 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:31:49.088595 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:31:49.088605 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:31:49.088618 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:31:49.088629 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:31:49.088651 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:31:49.088661 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:31:49.088671 systemd[1]: Mounting media.mount... Jul 15 11:31:49.088681 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:49.088691 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:31:49.088701 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:31:49.088712 systemd[1]: Mounting tmp.mount... Jul 15 11:31:49.088724 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:31:49.088734 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:31:49.088745 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:31:49.088755 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:31:49.088906 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:31:49.088920 systemd[1]: Starting modprobe@drm.service... Jul 15 11:31:49.088930 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:31:49.088949 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:31:49.088959 systemd[1]: Starting modprobe@loop.service... Jul 15 11:31:49.088972 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:31:49.088982 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:31:49.088992 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:31:49.089002 kernel: loop: module loaded Jul 15 11:31:49.089100 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:31:49.089112 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:31:49.089122 systemd[1]: Stopped systemd-journald.service. Jul 15 11:31:49.089131 kernel: fuse: init (API version 7.34) Jul 15 11:31:49.089141 systemd[1]: Starting systemd-journald.service... Jul 15 11:31:49.089153 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:31:49.089164 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:31:49.089175 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:31:49.089185 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:31:49.089195 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:31:49.089208 systemd-journald[986]: Journal started Jul 15 11:31:49.089251 systemd-journald[986]: Runtime Journal (/run/log/journal/e3579dda4baa479f850fe531c8876cef) is 6.0M, max 48.4M, 42.4M free. Jul 15 11:31:46.580000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:31:46.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:31:46.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:31:46.858000 audit: BPF prog-id=10 op=LOAD Jul 15 11:31:46.858000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:31:46.858000 audit: BPF prog-id=11 op=LOAD Jul 15 11:31:46.858000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:31:46.893000 audit[909]: AVC avc: denied { associate } for pid=909 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:31:46.893000 audit[909]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001558b4 a1=c0000d8de0 a2=c0000e1040 a3=32 items=0 ppid=892 pid=909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:46.893000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:31:46.894000 audit[909]: AVC avc: denied { associate } for pid=909 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:31:46.894000 audit[909]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c000155989 a2=1ed a3=0 items=2 ppid=892 pid=909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:46.894000 audit: CWD cwd="/" Jul 15 11:31:46.894000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:46.894000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:46.894000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:31:48.963000 audit: BPF prog-id=12 op=LOAD Jul 15 11:31:48.963000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:31:48.964000 audit: BPF prog-id=13 op=LOAD Jul 15 11:31:48.964000 audit: BPF prog-id=14 op=LOAD Jul 15 11:31:48.964000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:31:48.964000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:31:48.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:48.967000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:48.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:48.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:48.976000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:31:49.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.071000 audit: BPF prog-id=15 op=LOAD Jul 15 11:31:49.071000 audit: BPF prog-id=16 op=LOAD Jul 15 11:31:49.071000 audit: BPF prog-id=17 op=LOAD Jul 15 11:31:49.071000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:31:49.071000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:31:49.090068 systemd[1]: Stopped verity-setup.service. Jul 15 11:31:49.086000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:31:49.086000 audit[986]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7fff0b487ce0 a2=4000 a3=7fff0b487d7c items=0 ppid=1 pid=986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.086000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:31:48.962816 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:31:46.892159 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:31:48.962829 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 15 11:31:46.892355 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:31:48.965709 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:31:46.892370 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:31:46.892395 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:31:46.892403 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:31:46.892428 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:31:49.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:46.892438 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:31:46.892625 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:31:46.892657 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:31:46.892668 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:31:46.893173 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:31:46.893204 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:31:46.893220 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:31:46.893233 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:31:46.893247 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:31:46.893260 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:31:48.709941 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:48Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:31:48.710174 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:48Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:31:48.710257 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:48Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:31:48.710394 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:48Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:31:48.710446 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:48Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:31:48.710499 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:31:48Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:31:49.092804 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:49.094938 systemd[1]: Started systemd-journald.service. Jul 15 11:31:49.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.095936 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:31:49.096731 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:31:49.097498 systemd[1]: Mounted media.mount. Jul 15 11:31:49.098209 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:31:49.099169 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:31:49.100079 systemd[1]: Mounted tmp.mount. Jul 15 11:31:49.100989 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:31:49.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.102102 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:31:49.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.103112 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:31:49.103257 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:31:49.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.104274 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:31:49.104398 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:31:49.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.105411 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:31:49.105540 systemd[1]: Finished modprobe@drm.service. Jul 15 11:31:49.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.106498 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:31:49.106615 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:31:49.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.107645 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:31:49.107764 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:31:49.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.109086 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:31:49.109246 systemd[1]: Finished modprobe@loop.service. Jul 15 11:31:49.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.110485 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:31:49.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.111646 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:31:49.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.112797 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:31:49.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.114023 systemd[1]: Reached target network-pre.target. Jul 15 11:31:49.115856 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:31:49.117444 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:31:49.118462 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:31:49.119689 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:31:49.121545 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:31:49.122620 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:31:49.123460 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:31:49.124462 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:31:49.125318 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:31:49.128480 systemd-journald[986]: Time spent on flushing to /var/log/journal/e3579dda4baa479f850fe531c8876cef is 14.793ms for 1155 entries. Jul 15 11:31:49.128480 systemd-journald[986]: System Journal (/var/log/journal/e3579dda4baa479f850fe531c8876cef) is 8.0M, max 195.6M, 187.6M free. Jul 15 11:31:49.160649 systemd-journald[986]: Received client request to flush runtime journal. Jul 15 11:31:49.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.126974 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:31:49.131649 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:31:49.161592 udevadm[1012]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 15 11:31:49.132728 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:31:49.133612 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:31:49.134543 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:31:49.135468 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:31:49.137396 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:31:49.149653 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:31:49.150759 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:31:49.152575 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:31:49.161282 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:31:49.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.169593 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:31:49.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.573949 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:31:49.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.574000 audit: BPF prog-id=18 op=LOAD Jul 15 11:31:49.574000 audit: BPF prog-id=19 op=LOAD Jul 15 11:31:49.574000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:31:49.574000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:31:49.576232 systemd[1]: Starting systemd-udevd.service... Jul 15 11:31:49.595337 systemd-udevd[1018]: Using default interface naming scheme 'v252'. Jul 15 11:31:49.608236 systemd[1]: Started systemd-udevd.service. Jul 15 11:31:49.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.609000 audit: BPF prog-id=20 op=LOAD Jul 15 11:31:49.611456 systemd[1]: Starting systemd-networkd.service... Jul 15 11:31:49.614000 audit: BPF prog-id=21 op=LOAD Jul 15 11:31:49.614000 audit: BPF prog-id=22 op=LOAD Jul 15 11:31:49.614000 audit: BPF prog-id=23 op=LOAD Jul 15 11:31:49.616136 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:31:49.632422 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 15 11:31:49.643852 systemd[1]: Started systemd-userdbd.service. Jul 15 11:31:49.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.661764 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:31:49.681801 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 15 11:31:49.689807 kernel: ACPI: button: Power Button [PWRF] Jul 15 11:31:49.694655 systemd-networkd[1026]: lo: Link UP Jul 15 11:31:49.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.694664 systemd-networkd[1026]: lo: Gained carrier Jul 15 11:31:49.695003 systemd-networkd[1026]: Enumeration completed Jul 15 11:31:49.695093 systemd[1]: Started systemd-networkd.service. Jul 15 11:31:49.695097 systemd-networkd[1026]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:31:49.697285 systemd-networkd[1026]: eth0: Link UP Jul 15 11:31:49.697291 systemd-networkd[1026]: eth0: Gained carrier Jul 15 11:31:49.700000 audit[1032]: AVC avc: denied { confidentiality } for pid=1032 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 15 11:31:49.700000 audit[1032]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=560b9d5430e0 a1=338ac a2=7f18fab5abc5 a3=5 items=110 ppid=1018 pid=1032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.700000 audit: CWD cwd="/" Jul 15 11:31:49.700000 audit: PATH item=0 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=1 name=(null) inode=1856 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=2 name=(null) inode=1856 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=3 name=(null) inode=1857 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=4 name=(null) inode=1856 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=5 name=(null) inode=1858 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=6 name=(null) inode=1856 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=7 name=(null) inode=1859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=8 name=(null) inode=1859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=9 name=(null) inode=1860 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=10 name=(null) inode=1859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=11 name=(null) inode=1861 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=12 name=(null) inode=1859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=13 name=(null) inode=1862 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=14 name=(null) inode=1859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=15 name=(null) inode=1863 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=16 name=(null) inode=1859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=17 name=(null) inode=1864 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=18 name=(null) inode=1856 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=19 name=(null) inode=1865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=20 name=(null) inode=1865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=21 name=(null) inode=1866 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=22 name=(null) inode=1865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=23 name=(null) inode=1867 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=24 name=(null) inode=1865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=25 name=(null) inode=1868 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=26 name=(null) inode=1865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=27 name=(null) inode=1869 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=28 name=(null) inode=1865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=29 name=(null) inode=1870 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=30 name=(null) inode=1856 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=31 name=(null) inode=1871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=32 name=(null) inode=1871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=33 name=(null) inode=1872 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=34 name=(null) inode=1871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=35 name=(null) inode=1873 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=36 name=(null) inode=1871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=37 name=(null) inode=1874 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=38 name=(null) inode=1871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=39 name=(null) inode=1875 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=40 name=(null) inode=1871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=41 name=(null) inode=1876 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=42 name=(null) inode=1856 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=43 name=(null) inode=1877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=44 name=(null) inode=1877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=45 name=(null) inode=1878 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=46 name=(null) inode=1877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=47 name=(null) inode=1879 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=48 name=(null) inode=1877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=49 name=(null) inode=1880 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=50 name=(null) inode=1877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=51 name=(null) inode=1881 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=52 name=(null) inode=1877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=53 name=(null) inode=1882 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=54 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=55 name=(null) inode=1883 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=56 name=(null) inode=1883 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=57 name=(null) inode=1884 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=58 name=(null) inode=1883 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=59 name=(null) inode=1885 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=60 name=(null) inode=1883 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=61 name=(null) inode=1886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=62 name=(null) inode=1886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=63 name=(null) inode=1887 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=64 name=(null) inode=1886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=65 name=(null) inode=1888 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=66 name=(null) inode=1886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=67 name=(null) inode=1889 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=68 name=(null) inode=1886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=69 name=(null) inode=1890 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=70 name=(null) inode=1886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=71 name=(null) inode=1891 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=72 name=(null) inode=1883 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=73 name=(null) inode=1892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=74 name=(null) inode=1892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=75 name=(null) inode=1893 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=76 name=(null) inode=1892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=77 name=(null) inode=1894 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=78 name=(null) inode=1892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=79 name=(null) inode=1895 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=80 name=(null) inode=1892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=81 name=(null) inode=1896 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=82 name=(null) inode=1892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=83 name=(null) inode=1897 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=84 name=(null) inode=1883 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=85 name=(null) inode=1898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=86 name=(null) inode=1898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=87 name=(null) inode=1899 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=88 name=(null) inode=1898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=89 name=(null) inode=1900 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=90 name=(null) inode=1898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=91 name=(null) inode=1901 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=92 name=(null) inode=1898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=93 name=(null) inode=1902 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=94 name=(null) inode=1898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=95 name=(null) inode=1903 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=96 name=(null) inode=1883 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=97 name=(null) inode=1904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=98 name=(null) inode=1904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=99 name=(null) inode=1905 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=100 name=(null) inode=1904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=101 name=(null) inode=1906 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=102 name=(null) inode=1904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=103 name=(null) inode=1907 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=104 name=(null) inode=1904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=105 name=(null) inode=1908 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=106 name=(null) inode=1904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=107 name=(null) inode=1909 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PATH item=109 name=(null) inode=1910 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:31:49.700000 audit: PROCTITLE proctitle="(udev-worker)" Jul 15 11:31:49.710532 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Jul 15 11:31:49.714652 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 15 11:31:49.714762 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 15 11:31:49.714985 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 15 11:31:49.715002 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 15 11:31:49.713929 systemd-networkd[1026]: eth0: DHCPv4 address 10.0.0.85/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:31:49.735798 kernel: mousedev: PS/2 mouse device common for all mice Jul 15 11:31:49.788177 kernel: kvm: Nested Virtualization enabled Jul 15 11:31:49.788275 kernel: SVM: kvm: Nested Paging enabled Jul 15 11:31:49.788290 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 15 11:31:49.788302 kernel: SVM: Virtual GIF supported Jul 15 11:31:49.805797 kernel: EDAC MC: Ver: 3.0.0 Jul 15 11:31:49.831167 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:31:49.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.833201 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:31:49.839761 lvm[1054]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:31:49.866407 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:31:49.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.867413 systemd[1]: Reached target cryptsetup.target. Jul 15 11:31:49.869090 systemd[1]: Starting lvm2-activation.service... Jul 15 11:31:49.871998 lvm[1055]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:31:49.897370 systemd[1]: Finished lvm2-activation.service. Jul 15 11:31:49.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.898331 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:31:49.899263 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:31:49.899283 systemd[1]: Reached target local-fs.target. Jul 15 11:31:49.900065 systemd[1]: Reached target machines.target. Jul 15 11:31:49.901678 systemd[1]: Starting ldconfig.service... Jul 15 11:31:49.902839 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:31:49.902927 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:31:49.904389 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:31:49.906470 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:31:49.908845 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:31:49.910754 systemd[1]: Starting systemd-sysext.service... Jul 15 11:31:49.915702 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1057 (bootctl) Jul 15 11:31:49.916945 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:31:49.921230 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:31:49.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.924470 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:31:49.926894 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:31:49.927042 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:31:49.937809 kernel: loop0: detected capacity change from 0 to 221472 Jul 15 11:31:49.949224 systemd-fsck[1065]: fsck.fat 4.2 (2021-01-31) Jul 15 11:31:49.949224 systemd-fsck[1065]: /dev/vda1: 791 files, 120745/258078 clusters Jul 15 11:31:49.952710 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:31:49.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:49.957372 systemd[1]: Mounting boot.mount... Jul 15 11:31:50.179728 systemd[1]: Mounted boot.mount. Jul 15 11:31:50.188801 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:31:50.196924 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:31:50.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.199823 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:31:50.200324 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:31:50.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.208790 kernel: loop1: detected capacity change from 0 to 221472 Jul 15 11:31:50.212626 (sd-sysext)[1070]: Using extensions 'kubernetes'. Jul 15 11:31:50.212962 (sd-sysext)[1070]: Merged extensions into '/usr'. Jul 15 11:31:50.227297 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:50.228621 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:31:50.229536 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.230622 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:31:50.232250 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:31:50.233965 systemd[1]: Starting modprobe@loop.service... Jul 15 11:31:50.234798 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.234953 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:31:50.235094 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:50.237923 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:31:50.239118 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:31:50.239242 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:31:50.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.240490 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:31:50.240598 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:31:50.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.241911 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:31:50.242013 systemd[1]: Finished modprobe@loop.service. Jul 15 11:31:50.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.243302 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:31:50.243402 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.244303 systemd[1]: Finished systemd-sysext.service. Jul 15 11:31:50.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.246354 systemd[1]: Starting ensure-sysext.service... Jul 15 11:31:50.248077 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:31:50.252604 systemd[1]: Reloading. Jul 15 11:31:50.254830 ldconfig[1056]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:31:50.258162 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:31:50.259160 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:31:50.260717 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:31:50.304671 /usr/lib/systemd/system-generators/torcx-generator[1097]: time="2025-07-15T11:31:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:31:50.305010 /usr/lib/systemd/system-generators/torcx-generator[1097]: time="2025-07-15T11:31:50Z" level=info msg="torcx already run" Jul 15 11:31:50.367317 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:31:50.367333 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:31:50.383763 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:31:50.433000 audit: BPF prog-id=24 op=LOAD Jul 15 11:31:50.433000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:31:50.433000 audit: BPF prog-id=25 op=LOAD Jul 15 11:31:50.433000 audit: BPF prog-id=26 op=LOAD Jul 15 11:31:50.433000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:31:50.433000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:31:50.434000 audit: BPF prog-id=27 op=LOAD Jul 15 11:31:50.434000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:31:50.434000 audit: BPF prog-id=28 op=LOAD Jul 15 11:31:50.434000 audit: BPF prog-id=29 op=LOAD Jul 15 11:31:50.434000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:31:50.434000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:31:50.434000 audit: BPF prog-id=30 op=LOAD Jul 15 11:31:50.434000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:31:50.436000 audit: BPF prog-id=31 op=LOAD Jul 15 11:31:50.436000 audit: BPF prog-id=32 op=LOAD Jul 15 11:31:50.436000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:31:50.436000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:31:50.438870 systemd[1]: Finished ldconfig.service. Jul 15 11:31:50.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.440643 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:31:50.443800 systemd[1]: Starting audit-rules.service... Jul 15 11:31:50.445510 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:31:50.447260 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:31:50.448000 audit: BPF prog-id=33 op=LOAD Jul 15 11:31:50.449913 systemd[1]: Starting systemd-resolved.service... Jul 15 11:31:50.450000 audit: BPF prog-id=34 op=LOAD Jul 15 11:31:50.451874 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:31:50.453587 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:31:50.454908 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:31:50.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.457000 audit[1150]: SYSTEM_BOOT pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.457534 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:31:50.461950 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:50.462178 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.463681 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:31:50.466017 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:31:50.467830 systemd[1]: Starting modprobe@loop.service... Jul 15 11:31:50.468600 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.468706 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:31:50.468825 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:31:50.468896 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:50.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:50.472000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:31:50.472000 audit[1162]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd8aa62f50 a2=420 a3=0 items=0 ppid=1139 pid=1162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:50.472000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:31:50.469870 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:31:50.474105 augenrules[1162]: No rules Jul 15 11:31:50.471342 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:31:50.472753 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:31:50.472972 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:31:50.474421 systemd[1]: Finished audit-rules.service. Jul 15 11:31:50.475534 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:31:50.475649 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:31:50.476828 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:31:50.476938 systemd[1]: Finished modprobe@loop.service. Jul 15 11:31:50.480044 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:50.480225 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.481422 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:31:50.483504 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:31:50.485211 systemd[1]: Starting modprobe@loop.service... Jul 15 11:31:50.486026 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.486128 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:31:50.487242 systemd[1]: Starting systemd-update-done.service... Jul 15 11:31:50.488107 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:31:50.488187 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:50.489021 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:31:50.489120 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:31:50.490546 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:31:50.490640 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:31:50.491992 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:31:50.492085 systemd[1]: Finished modprobe@loop.service. Jul 15 11:31:50.493280 systemd[1]: Finished systemd-update-done.service. Jul 15 11:31:50.494655 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:31:50.494745 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.497185 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:50.497367 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.498190 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:31:50.500004 systemd[1]: Starting modprobe@drm.service... Jul 15 11:31:50.501740 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:31:50.503359 systemd[1]: Starting modprobe@loop.service... Jul 15 11:31:50.504134 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.504176 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:31:50.505094 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:31:50.506129 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:31:50.506154 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:31:50.506771 systemd[1]: Finished ensure-sysext.service. Jul 15 11:31:50.508073 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:31:50.508202 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:31:50.509290 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:31:50.509387 systemd[1]: Finished modprobe@drm.service. Jul 15 11:31:50.510382 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:31:50.510476 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:31:50.511591 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:31:50.511683 systemd[1]: Finished modprobe@loop.service. Jul 15 11:31:50.513494 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:31:50.513531 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:31:50.513991 systemd-resolved[1145]: Positive Trust Anchors: Jul 15 11:31:50.514005 systemd-resolved[1145]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:31:50.514035 systemd-resolved[1145]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:31:50.518905 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:31:50.519996 systemd[1]: Reached target time-set.target. Jul 15 11:31:50.520947 systemd-resolved[1145]: Defaulting to hostname 'linux'. Jul 15 11:31:51.252381 systemd-timesyncd[1146]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 15 11:31:51.252439 systemd-timesyncd[1146]: Initial clock synchronization to Tue 2025-07-15 11:31:51.252296 UTC. Jul 15 11:31:51.253540 systemd[1]: Started systemd-resolved.service. Jul 15 11:31:51.254459 systemd[1]: Reached target network.target. Jul 15 11:31:51.255346 systemd[1]: Reached target nss-lookup.target. Jul 15 11:31:51.256185 systemd[1]: Reached target sysinit.target. Jul 15 11:31:51.257035 systemd[1]: Started motdgen.path. Jul 15 11:31:51.257742 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:31:51.258925 systemd[1]: Started logrotate.timer. Jul 15 11:31:51.259720 systemd[1]: Started mdadm.timer. Jul 15 11:31:51.260382 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:31:51.261212 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:31:51.261236 systemd[1]: Reached target paths.target. Jul 15 11:31:51.261966 systemd[1]: Reached target timers.target. Jul 15 11:31:51.263020 systemd[1]: Listening on dbus.socket. Jul 15 11:31:51.264632 systemd[1]: Starting docker.socket... Jul 15 11:31:51.267469 systemd[1]: Listening on sshd.socket. Jul 15 11:31:51.268283 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:31:51.268634 systemd[1]: Listening on docker.socket. Jul 15 11:31:51.269434 systemd[1]: Reached target sockets.target. Jul 15 11:31:51.270213 systemd[1]: Reached target basic.target. Jul 15 11:31:51.270991 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:31:51.271015 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:31:51.271776 systemd[1]: Starting containerd.service... Jul 15 11:31:51.273348 systemd[1]: Starting dbus.service... Jul 15 11:31:51.274757 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:31:51.276437 systemd[1]: Starting extend-filesystems.service... Jul 15 11:31:51.277379 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:31:51.278233 systemd[1]: Starting motdgen.service... Jul 15 11:31:51.280712 jq[1181]: false Jul 15 11:31:51.282416 systemd[1]: Starting prepare-helm.service... Jul 15 11:31:51.284071 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:31:51.285946 systemd[1]: Starting sshd-keygen.service... Jul 15 11:31:51.288640 systemd[1]: Starting systemd-logind.service... Jul 15 11:31:51.289377 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:31:51.289432 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:31:51.289751 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:31:51.290317 systemd[1]: Starting update-engine.service... Jul 15 11:31:51.291133 extend-filesystems[1182]: Found loop1 Jul 15 11:31:51.292192 extend-filesystems[1182]: Found sr0 Jul 15 11:31:51.292192 extend-filesystems[1182]: Found vda Jul 15 11:31:51.292192 extend-filesystems[1182]: Found vda1 Jul 15 11:31:51.292192 extend-filesystems[1182]: Found vda2 Jul 15 11:31:51.292192 extend-filesystems[1182]: Found vda3 Jul 15 11:31:51.292192 extend-filesystems[1182]: Found usr Jul 15 11:31:51.292192 extend-filesystems[1182]: Found vda4 Jul 15 11:31:51.292192 extend-filesystems[1182]: Found vda6 Jul 15 11:31:51.301407 extend-filesystems[1182]: Found vda7 Jul 15 11:31:51.301407 extend-filesystems[1182]: Found vda9 Jul 15 11:31:51.301407 extend-filesystems[1182]: Checking size of /dev/vda9 Jul 15 11:31:51.295685 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:31:51.302670 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:31:51.306063 jq[1200]: true Jul 15 11:31:51.303088 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:31:51.303323 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:31:51.303468 systemd[1]: Finished motdgen.service. Jul 15 11:31:51.306847 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:31:51.307076 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:31:51.313138 systemd[1]: Started dbus.service. Jul 15 11:31:51.313004 dbus-daemon[1180]: [system] SELinux support is enabled Jul 15 11:31:51.315621 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:31:51.321054 tar[1204]: linux-amd64/helm Jul 15 11:31:51.321760 jq[1205]: true Jul 15 11:31:51.315637 systemd[1]: Reached target system-config.target. Jul 15 11:31:51.316761 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:31:51.316774 systemd[1]: Reached target user-config.target. Jul 15 11:31:51.330558 update_engine[1196]: I0715 11:31:51.329375 1196 main.cc:92] Flatcar Update Engine starting Jul 15 11:31:51.330812 extend-filesystems[1182]: Resized partition /dev/vda9 Jul 15 11:31:51.332783 systemd[1]: Started update-engine.service. Jul 15 11:31:51.334770 update_engine[1196]: I0715 11:31:51.333789 1196 update_check_scheduler.cc:74] Next update check in 11m52s Jul 15 11:31:51.334891 systemd[1]: Started locksmithd.service. Jul 15 11:31:51.336515 extend-filesystems[1225]: resize2fs 1.46.5 (30-Dec-2021) Jul 15 11:31:51.352418 env[1206]: time="2025-07-15T11:31:51.339079653Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:31:51.354862 systemd-logind[1195]: Watching system buttons on /dev/input/event1 (Power Button) Jul 15 11:31:51.354882 systemd-logind[1195]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 15 11:31:51.355388 systemd-logind[1195]: New seat seat0. Jul 15 11:31:51.357464 systemd[1]: Started systemd-logind.service. Jul 15 11:31:51.363841 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 15 11:31:51.373124 env[1206]: time="2025-07-15T11:31:51.373081194Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:31:51.376184 env[1206]: time="2025-07-15T11:31:51.376154034Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:31:51.377402 env[1206]: time="2025-07-15T11:31:51.377362039Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:31:51.377402 env[1206]: time="2025-07-15T11:31:51.377387877Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:31:51.377603 env[1206]: time="2025-07-15T11:31:51.377581530Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:31:51.377603 env[1206]: time="2025-07-15T11:31:51.377601588Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:31:51.377649 env[1206]: time="2025-07-15T11:31:51.377612799Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:31:51.377649 env[1206]: time="2025-07-15T11:31:51.377622126Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:31:51.377710 env[1206]: time="2025-07-15T11:31:51.377678873Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:31:51.377890 env[1206]: time="2025-07-15T11:31:51.377872866Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:31:51.377992 env[1206]: time="2025-07-15T11:31:51.377975048Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:31:51.378022 env[1206]: time="2025-07-15T11:31:51.377991138Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:31:51.378045 env[1206]: time="2025-07-15T11:31:51.378030923Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:31:51.378045 env[1206]: time="2025-07-15T11:31:51.378041683Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:31:51.382860 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 15 11:31:51.383555 bash[1230]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:31:51.384197 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:31:51.406364 extend-filesystems[1225]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 15 11:31:51.406364 extend-filesystems[1225]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 15 11:31:51.406364 extend-filesystems[1225]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 15 11:31:51.404281 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408094792Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408134035Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408144976Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408174261Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408187495Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408199207Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408211310Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408224334Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408236477Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408247829Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408258989Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408270882Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408370048Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:31:51.410134 env[1206]: time="2025-07-15T11:31:51.408439177Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:31:51.410388 extend-filesystems[1182]: Resized filesystem in /dev/vda9 Jul 15 11:31:51.404439 systemd[1]: Finished extend-filesystems.service. Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408640956Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408661344Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408672535Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408711909Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408722288Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408732457Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408742185Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408752785Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408763365Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408772773Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408783413Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408794563Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408899580Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408914679Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410856 env[1206]: time="2025-07-15T11:31:51.408925158Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.410483 systemd[1]: Started containerd.service. Jul 15 11:31:51.411207 env[1206]: time="2025-07-15T11:31:51.408934806Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:31:51.411207 env[1206]: time="2025-07-15T11:31:51.408952930Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:31:51.411207 env[1206]: time="2025-07-15T11:31:51.408966396Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:31:51.411207 env[1206]: time="2025-07-15T11:31:51.408987545Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:31:51.411207 env[1206]: time="2025-07-15T11:31:51.409021629Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.409191488Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.409239978Z" level=info msg="Connect containerd service" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.409268692Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.409736880Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.409955460Z" level=info msg="Start subscribing containerd event" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.409997819Z" level=info msg="Start recovering state" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.410039447Z" level=info msg="Start event monitor" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.410054245Z" level=info msg="Start snapshots syncer" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.410061158Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.410066869Z" level=info msg="Start streaming server" Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.410269148Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:31:51.411310 env[1206]: time="2025-07-15T11:31:51.410303482Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:31:51.413643 env[1206]: time="2025-07-15T11:31:51.411557804Z" level=info msg="containerd successfully booted in 0.073276s" Jul 15 11:31:51.419271 locksmithd[1232]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:31:51.697551 tar[1204]: linux-amd64/LICENSE Jul 15 11:31:51.697551 tar[1204]: linux-amd64/README.md Jul 15 11:31:51.701482 systemd[1]: Finished prepare-helm.service. Jul 15 11:31:51.892965 systemd-networkd[1026]: eth0: Gained IPv6LL Jul 15 11:31:51.894806 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:31:51.896216 systemd[1]: Reached target network-online.target. Jul 15 11:31:51.898719 systemd[1]: Starting kubelet.service... Jul 15 11:31:52.493283 sshd_keygen[1201]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:31:52.511269 systemd[1]: Finished sshd-keygen.service. Jul 15 11:31:52.513387 systemd[1]: Starting issuegen.service... Jul 15 11:31:52.518975 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:31:52.519093 systemd[1]: Finished issuegen.service. Jul 15 11:31:52.520933 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:31:52.525700 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:31:52.527518 systemd[1]: Started getty@tty1.service. Jul 15 11:31:52.529660 systemd[1]: Started serial-getty@ttyS0.service. Jul 15 11:31:52.530713 systemd[1]: Reached target getty.target. Jul 15 11:31:52.559532 systemd[1]: Started kubelet.service. Jul 15 11:31:52.560723 systemd[1]: Reached target multi-user.target. Jul 15 11:31:52.562793 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:31:52.569802 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:31:52.569935 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:31:52.571051 systemd[1]: Startup finished in 596ms (kernel) + 4.831s (initrd) + 5.298s (userspace) = 10.727s. Jul 15 11:31:52.944217 kubelet[1263]: E0715 11:31:52.944109 1263 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:31:52.945937 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:31:52.946049 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:31:54.881063 systemd[1]: Created slice system-sshd.slice. Jul 15 11:31:54.881945 systemd[1]: Started sshd@0-10.0.0.85:22-10.0.0.1:33376.service. Jul 15 11:31:54.921235 sshd[1272]: Accepted publickey for core from 10.0.0.1 port 33376 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:31:54.922541 sshd[1272]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:54.930484 systemd-logind[1195]: New session 1 of user core. Jul 15 11:31:54.931256 systemd[1]: Created slice user-500.slice. Jul 15 11:31:54.932150 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:31:54.939278 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:31:54.940277 systemd[1]: Starting user@500.service... Jul 15 11:31:54.942531 (systemd)[1275]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:55.006705 systemd[1275]: Queued start job for default target default.target. Jul 15 11:31:55.007094 systemd[1275]: Reached target paths.target. Jul 15 11:31:55.007113 systemd[1275]: Reached target sockets.target. Jul 15 11:31:55.007125 systemd[1275]: Reached target timers.target. Jul 15 11:31:55.007136 systemd[1275]: Reached target basic.target. Jul 15 11:31:55.007168 systemd[1275]: Reached target default.target. Jul 15 11:31:55.007191 systemd[1275]: Startup finished in 59ms. Jul 15 11:31:55.007241 systemd[1]: Started user@500.service. Jul 15 11:31:55.008091 systemd[1]: Started session-1.scope. Jul 15 11:31:55.057552 systemd[1]: Started sshd@1-10.0.0.85:22-10.0.0.1:33378.service. Jul 15 11:31:55.099285 sshd[1284]: Accepted publickey for core from 10.0.0.1 port 33378 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:31:55.100617 sshd[1284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:55.104592 systemd-logind[1195]: New session 2 of user core. Jul 15 11:31:55.105782 systemd[1]: Started session-2.scope. Jul 15 11:31:55.157624 sshd[1284]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:55.160495 systemd[1]: Started sshd@2-10.0.0.85:22-10.0.0.1:33384.service. Jul 15 11:31:55.160924 systemd[1]: sshd@1-10.0.0.85:22-10.0.0.1:33378.service: Deactivated successfully. Jul 15 11:31:55.161399 systemd[1]: session-2.scope: Deactivated successfully. Jul 15 11:31:55.161806 systemd-logind[1195]: Session 2 logged out. Waiting for processes to exit. Jul 15 11:31:55.162479 systemd-logind[1195]: Removed session 2. Jul 15 11:31:55.195204 sshd[1289]: Accepted publickey for core from 10.0.0.1 port 33384 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:31:55.196060 sshd[1289]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:55.198973 systemd-logind[1195]: New session 3 of user core. Jul 15 11:31:55.199648 systemd[1]: Started session-3.scope. Jul 15 11:31:55.247499 sshd[1289]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:55.250120 systemd[1]: sshd@2-10.0.0.85:22-10.0.0.1:33384.service: Deactivated successfully. Jul 15 11:31:55.250697 systemd[1]: session-3.scope: Deactivated successfully. Jul 15 11:31:55.251210 systemd-logind[1195]: Session 3 logged out. Waiting for processes to exit. Jul 15 11:31:55.252232 systemd[1]: Started sshd@3-10.0.0.85:22-10.0.0.1:33398.service. Jul 15 11:31:55.252948 systemd-logind[1195]: Removed session 3. Jul 15 11:31:55.288133 sshd[1296]: Accepted publickey for core from 10.0.0.1 port 33398 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:31:55.289158 sshd[1296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:55.291777 systemd-logind[1195]: New session 4 of user core. Jul 15 11:31:55.292571 systemd[1]: Started session-4.scope. Jul 15 11:31:55.343568 sshd[1296]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:55.345801 systemd[1]: sshd@3-10.0.0.85:22-10.0.0.1:33398.service: Deactivated successfully. Jul 15 11:31:55.346342 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:31:55.346795 systemd-logind[1195]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:31:55.347800 systemd[1]: Started sshd@4-10.0.0.85:22-10.0.0.1:33400.service. Jul 15 11:31:55.348378 systemd-logind[1195]: Removed session 4. Jul 15 11:31:55.382930 sshd[1302]: Accepted publickey for core from 10.0.0.1 port 33400 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:31:55.383863 sshd[1302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:55.386759 systemd-logind[1195]: New session 5 of user core. Jul 15 11:31:55.387529 systemd[1]: Started session-5.scope. Jul 15 11:31:55.440462 sudo[1305]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:31:55.440631 sudo[1305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:31:55.452022 dbus-daemon[1180]: н\u0006=\xd6U: received setenforce notice (enforcing=-738547216) Jul 15 11:31:55.454010 sudo[1305]: pam_unix(sudo:session): session closed for user root Jul 15 11:31:55.455352 sshd[1302]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:55.457798 systemd[1]: sshd@4-10.0.0.85:22-10.0.0.1:33400.service: Deactivated successfully. Jul 15 11:31:55.458248 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:31:55.458696 systemd-logind[1195]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:31:55.459569 systemd[1]: Started sshd@5-10.0.0.85:22-10.0.0.1:33414.service. Jul 15 11:31:55.460198 systemd-logind[1195]: Removed session 5. Jul 15 11:31:55.495350 sshd[1309]: Accepted publickey for core from 10.0.0.1 port 33414 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:31:55.496418 sshd[1309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:55.499675 systemd-logind[1195]: New session 6 of user core. Jul 15 11:31:55.500501 systemd[1]: Started session-6.scope. Jul 15 11:31:55.550614 sudo[1313]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:31:55.550784 sudo[1313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:31:55.552875 sudo[1313]: pam_unix(sudo:session): session closed for user root Jul 15 11:31:55.556137 sudo[1312]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:31:55.556301 sudo[1312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:31:55.562945 systemd[1]: Stopping audit-rules.service... Jul 15 11:31:55.562000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:31:55.563900 auditctl[1316]: No rules Jul 15 11:31:55.565005 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:31:55.565118 systemd[1]: Stopped audit-rules.service. Jul 15 11:31:55.566642 kernel: kauditd_printk_skb: 264 callbacks suppressed Jul 15 11:31:55.566695 kernel: audit: type=1305 audit(1752579115.562:184): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:31:55.566718 kernel: audit: type=1300 audit(1752579115.562:184): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcc88deb20 a2=420 a3=0 items=0 ppid=1 pid=1316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:55.562000 audit[1316]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcc88deb20 a2=420 a3=0 items=0 ppid=1 pid=1316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:55.566855 systemd[1]: Starting audit-rules.service... Jul 15 11:31:55.570620 kernel: audit: type=1327 audit(1752579115.562:184): proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:31:55.562000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:31:55.572612 kernel: audit: type=1131 audit(1752579115.563:185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.581381 augenrules[1333]: No rules Jul 15 11:31:55.581779 systemd[1]: Finished audit-rules.service. Jul 15 11:31:55.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.582729 sudo[1312]: pam_unix(sudo:session): session closed for user root Jul 15 11:31:55.581000 audit[1312]: USER_END pid=1312 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.585571 sshd[1309]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:55.587230 systemd[1]: sshd@5-10.0.0.85:22-10.0.0.1:33414.service: Deactivated successfully. Jul 15 11:31:55.587923 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:31:55.588400 systemd-logind[1195]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:31:55.588763 kernel: audit: type=1130 audit(1752579115.581:186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.588814 kernel: audit: type=1106 audit(1752579115.581:187): pid=1312 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.588853 kernel: audit: type=1104 audit(1752579115.581:188): pid=1312 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.581000 audit[1312]: CRED_DISP pid=1312 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.590975 systemd-logind[1195]: Removed session 6. Jul 15 11:31:55.591811 kernel: audit: type=1106 audit(1752579115.584:189): pid=1309 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:55.584000 audit[1309]: USER_END pid=1309 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:55.591863 systemd[1]: Started sshd@6-10.0.0.85:22-10.0.0.1:33422.service. Jul 15 11:31:55.584000 audit[1309]: CRED_DISP pid=1309 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:55.599124 kernel: audit: type=1104 audit(1752579115.584:190): pid=1309 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:55.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.85:22-10.0.0.1:33414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.602395 kernel: audit: type=1131 audit(1752579115.584:191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.85:22-10.0.0.1:33414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.85:22-10.0.0.1:33422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.629000 audit[1339]: USER_ACCT pid=1339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:55.630713 sshd[1339]: Accepted publickey for core from 10.0.0.1 port 33422 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:31:55.630000 audit[1339]: CRED_ACQ pid=1339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:55.630000 audit[1339]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb177e0c0 a2=3 a3=0 items=0 ppid=1 pid=1339 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:55.630000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:31:55.631461 sshd[1339]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:31:55.634551 systemd-logind[1195]: New session 7 of user core. Jul 15 11:31:55.635427 systemd[1]: Started session-7.scope. Jul 15 11:31:55.638000 audit[1339]: USER_START pid=1339 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:55.639000 audit[1341]: CRED_ACQ pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:55.685000 audit[1342]: USER_ACCT pid=1342 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.686090 sudo[1342]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:31:55.685000 audit[1342]: CRED_REFR pid=1342 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.686284 sudo[1342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:31:55.686000 audit[1342]: USER_START pid=1342 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:55.703606 systemd[1]: Starting docker.service... Jul 15 11:31:55.753279 env[1355]: time="2025-07-15T11:31:55.753224097Z" level=info msg="Starting up" Jul 15 11:31:55.754459 env[1355]: time="2025-07-15T11:31:55.754429156Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:31:55.754459 env[1355]: time="2025-07-15T11:31:55.754444315Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:31:55.754555 env[1355]: time="2025-07-15T11:31:55.754468390Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:31:55.754555 env[1355]: time="2025-07-15T11:31:55.754485853Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:31:55.756250 env[1355]: time="2025-07-15T11:31:55.756226075Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:31:55.756250 env[1355]: time="2025-07-15T11:31:55.756240091Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:31:55.756250 env[1355]: time="2025-07-15T11:31:55.756249869Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:31:55.756365 env[1355]: time="2025-07-15T11:31:55.756256792Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:31:56.414214 env[1355]: time="2025-07-15T11:31:56.414154476Z" level=info msg="Loading containers: start." Jul 15 11:31:56.466000 audit[1389]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.466000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff8d4bed90 a2=0 a3=7fff8d4bed7c items=0 ppid=1355 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.466000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:31:56.468000 audit[1391]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.468000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc620544d0 a2=0 a3=7ffc620544bc items=0 ppid=1355 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.468000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:31:56.469000 audit[1393]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1393 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.469000 audit[1393]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe40d536a0 a2=0 a3=7ffe40d5368c items=0 ppid=1355 pid=1393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.469000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:31:56.471000 audit[1395]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.471000 audit[1395]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd2f234160 a2=0 a3=7ffd2f23414c items=0 ppid=1355 pid=1395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.471000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:31:56.472000 audit[1397]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.472000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff7e245bf0 a2=0 a3=7fff7e245bdc items=0 ppid=1355 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.472000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:31:56.486000 audit[1402]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.486000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffc7e3b910 a2=0 a3=7fffc7e3b8fc items=0 ppid=1355 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.486000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:31:56.493000 audit[1404]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.493000 audit[1404]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc7d4e67f0 a2=0 a3=7ffc7d4e67dc items=0 ppid=1355 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.493000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:31:56.495000 audit[1406]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.495000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe84fab320 a2=0 a3=7ffe84fab30c items=0 ppid=1355 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.495000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:31:56.497000 audit[1408]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.497000 audit[1408]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd3f852dd0 a2=0 a3=7ffd3f852dbc items=0 ppid=1355 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.497000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:56.509000 audit[1412]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.509000 audit[1412]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdc86d7c40 a2=0 a3=7ffdc86d7c2c items=0 ppid=1355 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.509000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:56.514000 audit[1413]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.514000 audit[1413]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffff52b9ca0 a2=0 a3=7ffff52b9c8c items=0 ppid=1355 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.514000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:56.524847 kernel: Initializing XFRM netlink socket Jul 15 11:31:56.550652 env[1355]: time="2025-07-15T11:31:56.550607606Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:31:56.565000 audit[1421]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.565000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffec5604980 a2=0 a3=7ffec560496c items=0 ppid=1355 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.565000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:31:56.575000 audit[1424]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.575000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc535a3aa0 a2=0 a3=7ffc535a3a8c items=0 ppid=1355 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.575000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:31:56.578000 audit[1427]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.578000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffe7a9c0d0 a2=0 a3=7fffe7a9c0bc items=0 ppid=1355 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.578000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:31:56.580000 audit[1429]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.580000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffa630bac0 a2=0 a3=7fffa630baac items=0 ppid=1355 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.580000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:31:56.581000 audit[1431]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.581000 audit[1431]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe1ae6cea0 a2=0 a3=7ffe1ae6ce8c items=0 ppid=1355 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.581000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:31:56.583000 audit[1433]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.583000 audit[1433]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe61797800 a2=0 a3=7ffe617977ec items=0 ppid=1355 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.583000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:31:56.585000 audit[1435]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.585000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff466cc0e0 a2=0 a3=7fff466cc0cc items=0 ppid=1355 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.585000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:31:56.591000 audit[1438]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.591000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff0d1ec010 a2=0 a3=7fff0d1ebffc items=0 ppid=1355 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.591000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:31:56.593000 audit[1440]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.593000 audit[1440]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc1b0cff40 a2=0 a3=7ffc1b0cff2c items=0 ppid=1355 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.593000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:31:56.594000 audit[1442]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.594000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff76c52e70 a2=0 a3=7fff76c52e5c items=0 ppid=1355 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.594000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:31:56.596000 audit[1444]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.596000 audit[1444]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff4e415f90 a2=0 a3=7fff4e415f7c items=0 ppid=1355 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.596000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:31:56.597538 systemd-networkd[1026]: docker0: Link UP Jul 15 11:31:56.605000 audit[1448]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.605000 audit[1448]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffaac74fe0 a2=0 a3=7fffaac74fcc items=0 ppid=1355 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.605000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:56.609000 audit[1449]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:56.609000 audit[1449]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffa77196b0 a2=0 a3=7fffa771969c items=0 ppid=1355 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:56.609000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:56.611049 env[1355]: time="2025-07-15T11:31:56.611017503Z" level=info msg="Loading containers: done." Jul 15 11:31:56.622203 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3173433849-merged.mount: Deactivated successfully. Jul 15 11:31:56.627020 env[1355]: time="2025-07-15T11:31:56.626985498Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:31:56.627150 env[1355]: time="2025-07-15T11:31:56.627132814Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:31:56.627224 env[1355]: time="2025-07-15T11:31:56.627208496Z" level=info msg="Daemon has completed initialization" Jul 15 11:31:56.642665 systemd[1]: Started docker.service. Jul 15 11:31:56.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:56.649207 env[1355]: time="2025-07-15T11:31:56.649155709Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:31:57.579896 env[1206]: time="2025-07-15T11:31:57.579811115Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 15 11:31:58.600103 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount975283613.mount: Deactivated successfully. Jul 15 11:32:00.512784 env[1206]: time="2025-07-15T11:32:00.512721936Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:00.514936 env[1206]: time="2025-07-15T11:32:00.514903936Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:00.517236 env[1206]: time="2025-07-15T11:32:00.517207354Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:00.519082 env[1206]: time="2025-07-15T11:32:00.519033418Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:00.519881 env[1206]: time="2025-07-15T11:32:00.519846592Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977\"" Jul 15 11:32:00.520912 env[1206]: time="2025-07-15T11:32:00.520888385Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 15 11:32:02.523599 env[1206]: time="2025-07-15T11:32:02.523534291Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:02.525841 env[1206]: time="2025-07-15T11:32:02.525775001Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:02.527904 env[1206]: time="2025-07-15T11:32:02.527869848Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:02.529775 env[1206]: time="2025-07-15T11:32:02.529733542Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:02.530550 env[1206]: time="2025-07-15T11:32:02.530507433Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d\"" Jul 15 11:32:02.531033 env[1206]: time="2025-07-15T11:32:02.531010827Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 15 11:32:03.196813 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:32:03.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:03.197023 systemd[1]: Stopped kubelet.service. Jul 15 11:32:03.197903 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 15 11:32:03.197943 kernel: audit: type=1130 audit(1752579123.196:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:03.198241 systemd[1]: Starting kubelet.service... Jul 15 11:32:03.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:03.203946 kernel: audit: type=1131 audit(1752579123.196:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:03.313926 systemd[1]: Started kubelet.service. Jul 15 11:32:03.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:03.317851 kernel: audit: type=1130 audit(1752579123.313:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:03.641522 kubelet[1490]: E0715 11:32:03.641402 1490 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:32:03.644399 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:32:03.644517 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:32:03.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:32:03.647848 kernel: audit: type=1131 audit(1752579123.643:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:32:05.395251 env[1206]: time="2025-07-15T11:32:05.395188036Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:05.397428 env[1206]: time="2025-07-15T11:32:05.397393320Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:05.399248 env[1206]: time="2025-07-15T11:32:05.399216568Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:05.401348 env[1206]: time="2025-07-15T11:32:05.401323548Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:05.402112 env[1206]: time="2025-07-15T11:32:05.402074976Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2\"" Jul 15 11:32:05.402574 env[1206]: time="2025-07-15T11:32:05.402550287Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 15 11:32:06.414654 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3107702910.mount: Deactivated successfully. Jul 15 11:32:07.900805 env[1206]: time="2025-07-15T11:32:07.900747776Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:07.902528 env[1206]: time="2025-07-15T11:32:07.902479131Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:07.903847 env[1206]: time="2025-07-15T11:32:07.903800188Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:07.905171 env[1206]: time="2025-07-15T11:32:07.905141132Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:07.905511 env[1206]: time="2025-07-15T11:32:07.905486629Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c\"" Jul 15 11:32:07.905995 env[1206]: time="2025-07-15T11:32:07.905970657Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 15 11:32:08.938110 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount306800622.mount: Deactivated successfully. Jul 15 11:32:09.849844 env[1206]: time="2025-07-15T11:32:09.849775476Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:09.851844 env[1206]: time="2025-07-15T11:32:09.851810882Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:09.853555 env[1206]: time="2025-07-15T11:32:09.853536898Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:09.855198 env[1206]: time="2025-07-15T11:32:09.855154570Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:09.855953 env[1206]: time="2025-07-15T11:32:09.855931857Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 15 11:32:09.856376 env[1206]: time="2025-07-15T11:32:09.856354660Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:32:10.341395 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1517170646.mount: Deactivated successfully. Jul 15 11:32:10.345983 env[1206]: time="2025-07-15T11:32:10.345948443Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:10.347760 env[1206]: time="2025-07-15T11:32:10.347716618Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:10.349145 env[1206]: time="2025-07-15T11:32:10.349114218Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:10.350666 env[1206]: time="2025-07-15T11:32:10.350617065Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:10.351081 env[1206]: time="2025-07-15T11:32:10.351047132Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 15 11:32:10.351660 env[1206]: time="2025-07-15T11:32:10.351636747Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 15 11:32:10.866429 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3473298593.mount: Deactivated successfully. Jul 15 11:32:13.729130 env[1206]: time="2025-07-15T11:32:13.729068245Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:13.731042 env[1206]: time="2025-07-15T11:32:13.730989947Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:13.733090 env[1206]: time="2025-07-15T11:32:13.733063965Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:13.735047 env[1206]: time="2025-07-15T11:32:13.735026244Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:13.735903 env[1206]: time="2025-07-15T11:32:13.735872530Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Jul 15 11:32:13.895490 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:32:13.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.895746 systemd[1]: Stopped kubelet.service. Jul 15 11:32:13.897314 systemd[1]: Starting kubelet.service... Jul 15 11:32:13.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.903880 kernel: audit: type=1130 audit(1752579133.894:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.903986 kernel: audit: type=1131 audit(1752579133.894:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.993314 systemd[1]: Started kubelet.service. Jul 15 11:32:13.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.997838 kernel: audit: type=1130 audit(1752579133.992:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:14.031792 kubelet[1507]: E0715 11:32:14.031719 1507 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:32:14.033523 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:32:14.033680 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:32:14.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:32:14.037849 kernel: audit: type=1131 audit(1752579134.033:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:32:15.732150 systemd[1]: Stopped kubelet.service. Jul 15 11:32:15.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.734053 systemd[1]: Starting kubelet.service... Jul 15 11:32:15.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.738743 kernel: audit: type=1130 audit(1752579135.731:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.738810 kernel: audit: type=1131 audit(1752579135.731:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.753781 systemd[1]: Reloading. Jul 15 11:32:15.821878 /usr/lib/systemd/system-generators/torcx-generator[1555]: time="2025-07-15T11:32:15Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:32:15.822254 /usr/lib/systemd/system-generators/torcx-generator[1555]: time="2025-07-15T11:32:15Z" level=info msg="torcx already run" Jul 15 11:32:16.126377 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:32:16.126391 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:32:16.142446 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:32:16.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.205386 kernel: audit: type=1400 audit(1752579136.197:236): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.205445 kernel: audit: type=1400 audit(1752579136.197:237): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.205465 kernel: audit: type=1400 audit(1752579136.197:238): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208984 kernel: audit: type=1400 audit(1752579136.197:239): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.204000 audit: BPF prog-id=40 op=LOAD Jul 15 11:32:16.204000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:32:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208000 audit: BPF prog-id=41 op=LOAD Jul 15 11:32:16.208000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:32:16.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit: BPF prog-id=42 op=LOAD Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit: BPF prog-id=43 op=LOAD Jul 15 11:32:16.211000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:32:16.211000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit: BPF prog-id=44 op=LOAD Jul 15 11:32:16.212000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit: BPF prog-id=45 op=LOAD Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit: BPF prog-id=46 op=LOAD Jul 15 11:32:16.213000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:32:16.213000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit: BPF prog-id=47 op=LOAD Jul 15 11:32:16.213000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit: BPF prog-id=48 op=LOAD Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.213000 audit: BPF prog-id=49 op=LOAD Jul 15 11:32:16.214000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:32:16.214000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.214000 audit: BPF prog-id=50 op=LOAD Jul 15 11:32:16.214000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit: BPF prog-id=51 op=LOAD Jul 15 11:32:16.216000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.216000 audit: BPF prog-id=52 op=LOAD Jul 15 11:32:16.216000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit: BPF prog-id=53 op=LOAD Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.217000 audit: BPF prog-id=54 op=LOAD Jul 15 11:32:16.217000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:32:16.217000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:32:16.227009 systemd[1]: Started kubelet.service. Jul 15 11:32:16.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.230133 systemd[1]: Stopping kubelet.service... Jul 15 11:32:16.230557 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:32:16.230785 systemd[1]: Stopped kubelet.service. Jul 15 11:32:16.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.232191 systemd[1]: Starting kubelet.service... Jul 15 11:32:16.318539 systemd[1]: Started kubelet.service. Jul 15 11:32:16.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.366224 kubelet[1606]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:32:16.366224 kubelet[1606]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 15 11:32:16.366224 kubelet[1606]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:32:16.366567 kubelet[1606]: I0715 11:32:16.366331 1606 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:32:16.552759 kubelet[1606]: I0715 11:32:16.551511 1606 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 15 11:32:16.552759 kubelet[1606]: I0715 11:32:16.551539 1606 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:32:16.552759 kubelet[1606]: I0715 11:32:16.551937 1606 server.go:934] "Client rotation is on, will bootstrap in background" Jul 15 11:32:16.572787 kubelet[1606]: E0715 11:32:16.572749 1606 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.85:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:16.573893 kubelet[1606]: I0715 11:32:16.573866 1606 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:32:16.578472 kubelet[1606]: E0715 11:32:16.578445 1606 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:32:16.578472 kubelet[1606]: I0715 11:32:16.578471 1606 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:32:16.582913 kubelet[1606]: I0715 11:32:16.582884 1606 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:32:16.583060 kubelet[1606]: I0715 11:32:16.583035 1606 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 15 11:32:16.583184 kubelet[1606]: I0715 11:32:16.583157 1606 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:32:16.583356 kubelet[1606]: I0715 11:32:16.583177 1606 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:32:16.583441 kubelet[1606]: I0715 11:32:16.583357 1606 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:32:16.583441 kubelet[1606]: I0715 11:32:16.583365 1606 container_manager_linux.go:300] "Creating device plugin manager" Jul 15 11:32:16.583482 kubelet[1606]: I0715 11:32:16.583477 1606 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:32:16.592339 kubelet[1606]: I0715 11:32:16.592302 1606 kubelet.go:408] "Attempting to sync node with API server" Jul 15 11:32:16.592339 kubelet[1606]: I0715 11:32:16.592328 1606 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:32:16.592512 kubelet[1606]: I0715 11:32:16.592361 1606 kubelet.go:314] "Adding apiserver pod source" Jul 15 11:32:16.592512 kubelet[1606]: I0715 11:32:16.592380 1606 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:32:16.603744 kubelet[1606]: W0715 11:32:16.603687 1606 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.85:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Jul 15 11:32:16.603794 kubelet[1606]: E0715 11:32:16.603751 1606 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.85:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:16.605107 kubelet[1606]: W0715 11:32:16.605067 1606 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Jul 15 11:32:16.605161 kubelet[1606]: E0715 11:32:16.605110 1606 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:16.608773 kubelet[1606]: I0715 11:32:16.608736 1606 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:32:16.609578 kubelet[1606]: I0715 11:32:16.609548 1606 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:32:16.609631 kubelet[1606]: W0715 11:32:16.609595 1606 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:32:16.612000 kubelet[1606]: I0715 11:32:16.611976 1606 server.go:1274] "Started kubelet" Jul 15 11:32:16.621201 kubelet[1606]: I0715 11:32:16.621173 1606 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:32:16.621375 kubelet[1606]: I0715 11:32:16.621347 1606 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:32:16.621691 kubelet[1606]: I0715 11:32:16.621675 1606 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:32:16.626000 audit[1606]: AVC avc: denied { mac_admin } for pid=1606 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.626000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:32:16.626000 audit[1606]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a44fc0 a1=c000b7ef78 a2=c000a44f90 a3=25 items=0 ppid=1 pid=1606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.626000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:32:16.626000 audit[1606]: AVC avc: denied { mac_admin } for pid=1606 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.626000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:32:16.626000 audit[1606]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c67020 a1=c000b7ef90 a2=c000a45050 a3=25 items=0 ppid=1 pid=1606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.626000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:32:16.627447 kubelet[1606]: I0715 11:32:16.626417 1606 server.go:449] "Adding debug handlers to kubelet server" Jul 15 11:32:16.627447 kubelet[1606]: I0715 11:32:16.627035 1606 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:32:16.627447 kubelet[1606]: I0715 11:32:16.627079 1606 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 15 11:32:16.627447 kubelet[1606]: I0715 11:32:16.627160 1606 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:32:16.627447 kubelet[1606]: I0715 11:32:16.627242 1606 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:32:16.628544 kubelet[1606]: E0715 11:32:16.628526 1606 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:16.628656 kubelet[1606]: I0715 11:32:16.628641 1606 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 15 11:32:16.628963 kubelet[1606]: I0715 11:32:16.628940 1606 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 15 11:32:16.629125 kubelet[1606]: I0715 11:32:16.629081 1606 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:32:16.630107 kubelet[1606]: W0715 11:32:16.629858 1606 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Jul 15 11:32:16.630107 kubelet[1606]: E0715 11:32:16.629942 1606 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:16.630107 kubelet[1606]: E0715 11:32:16.629997 1606 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.85:6443: connect: connection refused" interval="200ms" Jul 15 11:32:16.630278 kubelet[1606]: I0715 11:32:16.630255 1606 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:32:16.630527 kubelet[1606]: I0715 11:32:16.630329 1606 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:32:16.630591 kubelet[1606]: E0715 11:32:16.628945 1606 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.85:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.85:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.185269706e841eb3 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:32:16.611950259 +0000 UTC m=+0.289328088,LastTimestamp:2025-07-15 11:32:16.611950259 +0000 UTC m=+0.289328088,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:32:16.630687 kubelet[1606]: E0715 11:32:16.630633 1606 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:32:16.631231 kubelet[1606]: I0715 11:32:16.631204 1606 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:32:16.630000 audit[1619]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:16.630000 audit[1619]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd9d5413a0 a2=0 a3=7ffd9d54138c items=0 ppid=1606 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.630000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:32:16.632000 audit[1620]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:16.632000 audit[1620]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe12427860 a2=0 a3=7ffe1242784c items=0 ppid=1606 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.632000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:32:16.633000 audit[1622]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:16.633000 audit[1622]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff9ba487a0 a2=0 a3=7fff9ba4878c items=0 ppid=1606 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.633000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:32:16.635000 audit[1624]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:16.635000 audit[1624]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff7d03d8b0 a2=0 a3=7fff7d03d89c items=0 ppid=1606 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.635000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:32:16.642606 kubelet[1606]: I0715 11:32:16.642572 1606 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 15 11:32:16.642606 kubelet[1606]: I0715 11:32:16.642596 1606 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 15 11:32:16.642606 kubelet[1606]: I0715 11:32:16.642608 1606 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:32:16.642000 audit[1629]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:16.642000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff992d2720 a2=0 a3=7fff992d270c items=0 ppid=1606 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.642000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:32:16.643512 kubelet[1606]: I0715 11:32:16.643356 1606 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:32:16.643000 audit[1631]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:16.643000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff0918d7c0 a2=0 a3=7fff0918d7ac items=0 ppid=1606 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.643000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:32:16.644399 kubelet[1606]: I0715 11:32:16.644375 1606 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:32:16.644399 kubelet[1606]: I0715 11:32:16.644396 1606 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 15 11:32:16.644488 kubelet[1606]: I0715 11:32:16.644423 1606 kubelet.go:2321] "Starting kubelet main sync loop" Jul 15 11:32:16.644488 kubelet[1606]: E0715 11:32:16.644464 1606 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:32:16.644000 audit[1632]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:16.644000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc1cade480 a2=0 a3=7ffc1cade46c items=0 ppid=1606 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.644000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:32:16.645000 audit[1633]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:16.645000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd73046130 a2=0 a3=7ffd7304611c items=0 ppid=1606 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.645000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:32:16.646000 audit[1634]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:16.646000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff32511360 a2=0 a3=7fff3251134c items=0 ppid=1606 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:32:16.647410 kubelet[1606]: W0715 11:32:16.647271 1606 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Jul 15 11:32:16.647410 kubelet[1606]: E0715 11:32:16.647332 1606 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:16.647000 audit[1636]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:16.647000 audit[1636]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff5e39ea90 a2=0 a3=7fff5e39ea7c items=0 ppid=1606 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.647000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:32:16.647000 audit[1639]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:16.647000 audit[1639]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffedc752bb0 a2=0 a3=7ffedc752b9c items=0 ppid=1606 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.647000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:32:16.648000 audit[1640]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:16.648000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc6234a310 a2=0 a3=7ffc6234a2fc items=0 ppid=1606 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.648000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:32:16.728820 kubelet[1606]: E0715 11:32:16.728762 1606 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:16.745221 kubelet[1606]: E0715 11:32:16.745162 1606 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:32:16.829465 kubelet[1606]: E0715 11:32:16.829373 1606 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:16.831041 kubelet[1606]: E0715 11:32:16.830979 1606 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.85:6443: connect: connection refused" interval="400ms" Jul 15 11:32:16.929793 kubelet[1606]: E0715 11:32:16.929766 1606 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:16.946145 kubelet[1606]: E0715 11:32:16.946105 1606 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:32:17.030582 kubelet[1606]: E0715 11:32:17.030523 1606 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:17.087957 kubelet[1606]: I0715 11:32:17.087837 1606 policy_none.go:49] "None policy: Start" Jul 15 11:32:17.088683 kubelet[1606]: I0715 11:32:17.088664 1606 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 15 11:32:17.088738 kubelet[1606]: I0715 11:32:17.088689 1606 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:32:17.131298 kubelet[1606]: E0715 11:32:17.131267 1606 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:17.151776 systemd[1]: Created slice kubepods.slice. Jul 15 11:32:17.155816 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:32:17.158211 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:32:17.169469 kubelet[1606]: I0715 11:32:17.169424 1606 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:32:17.168000 audit[1606]: AVC avc: denied { mac_admin } for pid=1606 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.168000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:32:17.168000 audit[1606]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b7de30 a1=c000f08e28 a2=c000b7de00 a3=25 items=0 ppid=1 pid=1606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:17.168000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:32:17.169719 kubelet[1606]: I0715 11:32:17.169499 1606 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:32:17.169719 kubelet[1606]: I0715 11:32:17.169637 1606 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:32:17.169719 kubelet[1606]: I0715 11:32:17.169648 1606 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:32:17.170124 kubelet[1606]: I0715 11:32:17.169901 1606 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:32:17.171588 kubelet[1606]: E0715 11:32:17.171555 1606 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:32:17.231478 kubelet[1606]: E0715 11:32:17.231416 1606 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.85:6443: connect: connection refused" interval="800ms" Jul 15 11:32:17.271582 kubelet[1606]: I0715 11:32:17.271558 1606 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:32:17.271938 kubelet[1606]: E0715 11:32:17.271909 1606 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.85:6443/api/v1/nodes\": dial tcp 10.0.0.85:6443: connect: connection refused" node="localhost" Jul 15 11:32:17.353166 systemd[1]: Created slice kubepods-burstable-pod43b106ce26b08d4a03685ab04d2aaaba.slice. Jul 15 11:32:17.364244 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 15 11:32:17.375231 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 15 11:32:17.434079 kubelet[1606]: I0715 11:32:17.434020 1606 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/43b106ce26b08d4a03685ab04d2aaaba-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"43b106ce26b08d4a03685ab04d2aaaba\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:32:17.434079 kubelet[1606]: I0715 11:32:17.434089 1606 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:17.434553 kubelet[1606]: I0715 11:32:17.434115 1606 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:17.434553 kubelet[1606]: I0715 11:32:17.434140 1606 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:32:17.434553 kubelet[1606]: I0715 11:32:17.434160 1606 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/43b106ce26b08d4a03685ab04d2aaaba-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"43b106ce26b08d4a03685ab04d2aaaba\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:32:17.434553 kubelet[1606]: I0715 11:32:17.434185 1606 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/43b106ce26b08d4a03685ab04d2aaaba-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"43b106ce26b08d4a03685ab04d2aaaba\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:32:17.434553 kubelet[1606]: I0715 11:32:17.434243 1606 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:17.434735 kubelet[1606]: I0715 11:32:17.434272 1606 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:17.434735 kubelet[1606]: I0715 11:32:17.434288 1606 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:17.472893 kubelet[1606]: I0715 11:32:17.472865 1606 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:32:17.473208 kubelet[1606]: E0715 11:32:17.473167 1606 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.85:6443/api/v1/nodes\": dial tcp 10.0.0.85:6443: connect: connection refused" node="localhost" Jul 15 11:32:17.521584 kubelet[1606]: W0715 11:32:17.521516 1606 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Jul 15 11:32:17.521584 kubelet[1606]: E0715 11:32:17.521576 1606 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:17.663212 kubelet[1606]: E0715 11:32:17.663166 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:17.663761 env[1206]: time="2025-07-15T11:32:17.663719090Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:43b106ce26b08d4a03685ab04d2aaaba,Namespace:kube-system,Attempt:0,}" Jul 15 11:32:17.673916 kubelet[1606]: E0715 11:32:17.673877 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:17.674297 env[1206]: time="2025-07-15T11:32:17.674258097Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 15 11:32:17.677514 kubelet[1606]: E0715 11:32:17.677486 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:17.677916 env[1206]: time="2025-07-15T11:32:17.677871410Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 15 11:32:17.874542 kubelet[1606]: I0715 11:32:17.874502 1606 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:32:17.874945 kubelet[1606]: E0715 11:32:17.874882 1606 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.85:6443/api/v1/nodes\": dial tcp 10.0.0.85:6443: connect: connection refused" node="localhost" Jul 15 11:32:18.007843 kubelet[1606]: W0715 11:32:18.007710 1606 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Jul 15 11:32:18.007843 kubelet[1606]: E0715 11:32:18.007778 1606 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:18.032532 kubelet[1606]: E0715 11:32:18.032483 1606 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.85:6443: connect: connection refused" interval="1.6s" Jul 15 11:32:18.056160 kubelet[1606]: W0715 11:32:18.056084 1606 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.85:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Jul 15 11:32:18.056247 kubelet[1606]: E0715 11:32:18.056164 1606 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.85:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:18.217031 kubelet[1606]: W0715 11:32:18.216953 1606 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Jul 15 11:32:18.217146 kubelet[1606]: E0715 11:32:18.217037 1606 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:18.592484 kubelet[1606]: E0715 11:32:18.592404 1606 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.85:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:18.676488 kubelet[1606]: I0715 11:32:18.676444 1606 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:32:18.676944 kubelet[1606]: E0715 11:32:18.676898 1606 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.85:6443/api/v1/nodes\": dial tcp 10.0.0.85:6443: connect: connection refused" node="localhost" Jul 15 11:32:18.701121 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2133059163.mount: Deactivated successfully. Jul 15 11:32:18.710071 env[1206]: time="2025-07-15T11:32:18.710035169Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.714279 env[1206]: time="2025-07-15T11:32:18.714234040Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.715235 env[1206]: time="2025-07-15T11:32:18.715199771Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.716231 env[1206]: time="2025-07-15T11:32:18.716201929Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.719581 env[1206]: time="2025-07-15T11:32:18.719545628Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.720679 env[1206]: time="2025-07-15T11:32:18.720604663Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.721841 env[1206]: time="2025-07-15T11:32:18.721781890Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.723470 env[1206]: time="2025-07-15T11:32:18.723443705Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.725164 env[1206]: time="2025-07-15T11:32:18.725141147Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.726233 env[1206]: time="2025-07-15T11:32:18.726211323Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.726892 env[1206]: time="2025-07-15T11:32:18.726856332Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.728731 env[1206]: time="2025-07-15T11:32:18.728695631Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:18.820895 env[1206]: time="2025-07-15T11:32:18.818243511Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:18.820895 env[1206]: time="2025-07-15T11:32:18.818321757Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:18.820895 env[1206]: time="2025-07-15T11:32:18.818335143Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:18.820895 env[1206]: time="2025-07-15T11:32:18.818573059Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9c4899eaa460556cf90f4a3a2ba212b834e0ce5a4b498f0f62188b5b6489356a pid=1649 runtime=io.containerd.runc.v2 Jul 15 11:32:18.826875 env[1206]: time="2025-07-15T11:32:18.826794801Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:18.826875 env[1206]: time="2025-07-15T11:32:18.826852369Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:18.827003 env[1206]: time="2025-07-15T11:32:18.826871235Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:18.827003 env[1206]: time="2025-07-15T11:32:18.826958148Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/81602b2c4d2d5d096dae69421ae575c2411eaafb9ce8ac5f1fc2ea3c0b46b4fa pid=1673 runtime=io.containerd.runc.v2 Jul 15 11:32:18.832132 env[1206]: time="2025-07-15T11:32:18.832043912Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:18.832132 env[1206]: time="2025-07-15T11:32:18.832083125Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:18.832132 env[1206]: time="2025-07-15T11:32:18.832096921Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:18.832433 env[1206]: time="2025-07-15T11:32:18.832404668Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7fe10b210f247599566cc1d0691300f3b6fe1048de39a76ef96b536ac657efc1 pid=1672 runtime=io.containerd.runc.v2 Jul 15 11:32:18.850775 systemd[1]: Started cri-containerd-81602b2c4d2d5d096dae69421ae575c2411eaafb9ce8ac5f1fc2ea3c0b46b4fa.scope. Jul 15 11:32:18.906874 systemd[1]: Started cri-containerd-9c4899eaa460556cf90f4a3a2ba212b834e0ce5a4b498f0f62188b5b6489356a.scope. Jul 15 11:32:18.922137 systemd[1]: Started cri-containerd-7fe10b210f247599566cc1d0691300f3b6fe1048de39a76ef96b536ac657efc1.scope. Jul 15 11:32:18.969592 kernel: kauditd_printk_skb: 219 callbacks suppressed Jul 15 11:32:18.969793 kernel: audit: type=1400 audit(1752579138.936:426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.976460 kernel: audit: type=1400 audit(1752579138.936:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.976515 kernel: audit: type=1400 audit(1752579138.936:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979735 kernel: audit: type=1400 audit(1752579138.936:429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.986125 kernel: audit: type=1400 audit(1752579138.936:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.986192 kernel: audit: type=1400 audit(1752579138.936:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.994666 kernel: audit: type=1400 audit(1752579138.936:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999391 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 15 11:32:18.999454 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 15 11:32:18.999471 kernel: audit: type=1400 audit(1752579138.936:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.975000 audit: BPF prog-id=55 op=LOAD Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363032623263346432643564303936646165363934323161653537 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363032623263346432643564303936646165363934323161653537 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit: BPF prog-id=56 op=LOAD Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1649 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343839396561613436303535366366393066346133613262613231 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1649 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343839396561613436303535366366393066346133613262613231 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.979000 audit: BPF prog-id=57 op=LOAD Jul 15 11:32:18.979000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003092e0 items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363032623263346432643564303936646165363934323161653537 Jul 15 11:32:18.993000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.993000 audit: BPF prog-id=58 op=LOAD Jul 15 11:32:18.998000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.985000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000099040 items=0 ppid=1649 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343839396561613436303535366366393066346133613262613231 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit: BPF prog-id=62 op=LOAD Jul 15 11:32:18.999000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000099088 items=0 ppid=1649 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343839396561613436303535366366393066346133613262613231 Jul 15 11:32:18.999000 audit: BPF prog-id=62 op=UNLOAD Jul 15 11:32:18.999000 audit: BPF prog-id=59 op=UNLOAD Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.999000 audit: BPF prog-id=63 op=LOAD Jul 15 11:32:18.999000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000099498 items=0 ppid=1649 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343839396561613436303535366366393066346133613262613231 Jul 15 11:32:18.998000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031fa88 items=0 ppid=1672 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766653130623231306632343735393935363663633164303639313330 Jul 15 11:32:19.001000 audit: BPF prog-id=61 op=UNLOAD Jul 15 11:32:19.001000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.993000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=no exit=-11 a0=5 a1=c0001bd770 a2=78 a3=c000309328 items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363032623263346432643564303936646165363934323161653537 Jul 15 11:32:19.001000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit: BPF prog-id=64 op=LOAD Jul 15 11:32:19.001000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00031fe98 items=0 ppid=1672 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766653130623231306632343735393935363663633164303639313330 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit: BPF prog-id=65 op=LOAD Jul 15 11:32:19.001000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=1 items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363032623263346432643564303936646165363934323161653537 Jul 15 11:32:19.001000 audit: BPF prog-id=65 op=UNLOAD Jul 15 11:32:19.001000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.001000 audit: BPF prog-id=66 op=LOAD Jul 15 11:32:19.001000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000309738 items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363032623263346432643564303936646165363934323161653537 Jul 15 11:32:19.029432 env[1206]: time="2025-07-15T11:32:19.028918551Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:43b106ce26b08d4a03685ab04d2aaaba,Namespace:kube-system,Attempt:0,} returns sandbox id \"7fe10b210f247599566cc1d0691300f3b6fe1048de39a76ef96b536ac657efc1\"" Jul 15 11:32:19.029936 kubelet[1606]: E0715 11:32:19.029917 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:19.031512 env[1206]: time="2025-07-15T11:32:19.031484321Z" level=info msg="CreateContainer within sandbox \"7fe10b210f247599566cc1d0691300f3b6fe1048de39a76ef96b536ac657efc1\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:32:19.032958 env[1206]: time="2025-07-15T11:32:19.032923499Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"9c4899eaa460556cf90f4a3a2ba212b834e0ce5a4b498f0f62188b5b6489356a\"" Jul 15 11:32:19.034521 kubelet[1606]: E0715 11:32:19.034502 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:19.035870 env[1206]: time="2025-07-15T11:32:19.035797407Z" level=info msg="CreateContainer within sandbox \"9c4899eaa460556cf90f4a3a2ba212b834e0ce5a4b498f0f62188b5b6489356a\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:32:19.039167 env[1206]: time="2025-07-15T11:32:19.039134182Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"81602b2c4d2d5d096dae69421ae575c2411eaafb9ce8ac5f1fc2ea3c0b46b4fa\"" Jul 15 11:32:19.039612 kubelet[1606]: E0715 11:32:19.039599 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:19.040796 env[1206]: time="2025-07-15T11:32:19.040774397Z" level=info msg="CreateContainer within sandbox \"81602b2c4d2d5d096dae69421ae575c2411eaafb9ce8ac5f1fc2ea3c0b46b4fa\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:32:19.633888 kubelet[1606]: E0715 11:32:19.633812 1606 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.85:6443: connect: connection refused" interval="3.2s" Jul 15 11:32:19.776321 env[1206]: time="2025-07-15T11:32:19.776267333Z" level=info msg="CreateContainer within sandbox \"9c4899eaa460556cf90f4a3a2ba212b834e0ce5a4b498f0f62188b5b6489356a\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"03fe92d400b251c19ff393337a7088f8350ad72ad935f57d29235693b5b80cb9\"" Jul 15 11:32:19.777037 env[1206]: time="2025-07-15T11:32:19.776989728Z" level=info msg="StartContainer for \"03fe92d400b251c19ff393337a7088f8350ad72ad935f57d29235693b5b80cb9\"" Jul 15 11:32:19.780560 env[1206]: time="2025-07-15T11:32:19.780524785Z" level=info msg="CreateContainer within sandbox \"7fe10b210f247599566cc1d0691300f3b6fe1048de39a76ef96b536ac657efc1\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"64143bc38c53ed547a40d2274bb6fc3a015a9890c1b6c7320bad514122159caf\"" Jul 15 11:32:19.780998 env[1206]: time="2025-07-15T11:32:19.780957476Z" level=info msg="StartContainer for \"64143bc38c53ed547a40d2274bb6fc3a015a9890c1b6c7320bad514122159caf\"" Jul 15 11:32:19.782331 env[1206]: time="2025-07-15T11:32:19.782290505Z" level=info msg="CreateContainer within sandbox \"81602b2c4d2d5d096dae69421ae575c2411eaafb9ce8ac5f1fc2ea3c0b46b4fa\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"a934660784c1dbc106f1d14ed3caae3373bd1b9f076a1ffc0815e240a404e043\"" Jul 15 11:32:19.782579 env[1206]: time="2025-07-15T11:32:19.782546094Z" level=info msg="StartContainer for \"a934660784c1dbc106f1d14ed3caae3373bd1b9f076a1ffc0815e240a404e043\"" Jul 15 11:32:19.796154 systemd[1]: Started cri-containerd-64143bc38c53ed547a40d2274bb6fc3a015a9890c1b6c7320bad514122159caf.scope. Jul 15 11:32:19.798647 systemd[1]: Started cri-containerd-03fe92d400b251c19ff393337a7088f8350ad72ad935f57d29235693b5b80cb9.scope. Jul 15 11:32:19.805020 systemd[1]: Started cri-containerd-a934660784c1dbc106f1d14ed3caae3373bd1b9f076a1ffc0815e240a404e043.scope. Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.813000 audit: BPF prog-id=67 op=LOAD Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1672 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313433626333386335336564353437613430643232373462623666 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1672 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313433626333386335336564353437613430643232373462623666 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit: BPF prog-id=68 op=LOAD Jul 15 11:32:19.814000 audit[1791]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003904d0 items=0 ppid=1672 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313433626333386335336564353437613430643232373462623666 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit: BPF prog-id=69 op=LOAD Jul 15 11:32:19.814000 audit[1791]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000390518 items=0 ppid=1672 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313433626333386335336564353437613430643232373462623666 Jul 15 11:32:19.814000 audit: BPF prog-id=69 op=UNLOAD Jul 15 11:32:19.814000 audit: BPF prog-id=68 op=UNLOAD Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.814000 audit: BPF prog-id=70 op=LOAD Jul 15 11:32:19.814000 audit[1791]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000390928 items=0 ppid=1672 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313433626333386335336564353437613430643232373462623666 Jul 15 11:32:19.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit: BPF prog-id=71 op=LOAD Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1649 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666539326434303062323531633139666633393333333761373038 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1649 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666539326434303062323531633139666633393333333761373038 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit: BPF prog-id=72 op=LOAD Jul 15 11:32:19.817000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00023f5d0 items=0 ppid=1649 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666539326434303062323531633139666633393333333761373038 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit: BPF prog-id=73 op=LOAD Jul 15 11:32:19.817000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00023f618 items=0 ppid=1649 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666539326434303062323531633139666633393333333761373038 Jul 15 11:32:19.817000 audit: BPF prog-id=73 op=UNLOAD Jul 15 11:32:19.817000 audit: BPF prog-id=72 op=UNLOAD Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.817000 audit: BPF prog-id=74 op=LOAD Jul 15 11:32:19.817000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00023fa28 items=0 ppid=1649 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666539326434303062323531633139666633393333333761373038 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit: BPF prog-id=75 op=LOAD Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1673 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139333436363037383463316462633130366631643134656433636161 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1673 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139333436363037383463316462633130366631643134656433636161 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit: BPF prog-id=76 op=LOAD Jul 15 11:32:19.851000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001479d8 a2=78 a3=c0003ce8e0 items=0 ppid=1673 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139333436363037383463316462633130366631643134656433636161 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit: BPF prog-id=77 op=LOAD Jul 15 11:32:19.851000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000147770 a2=78 a3=c0003ce928 items=0 ppid=1673 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139333436363037383463316462633130366631643134656433636161 Jul 15 11:32:19.851000 audit: BPF prog-id=77 op=UNLOAD Jul 15 11:32:19.851000 audit: BPF prog-id=76 op=UNLOAD Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.851000 audit: BPF prog-id=78 op=LOAD Jul 15 11:32:19.851000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147c30 a2=78 a3=c0003ced38 items=0 ppid=1673 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139333436363037383463316462633130366631643134656433636161 Jul 15 11:32:19.862126 env[1206]: time="2025-07-15T11:32:19.862075002Z" level=info msg="StartContainer for \"64143bc38c53ed547a40d2274bb6fc3a015a9890c1b6c7320bad514122159caf\" returns successfully" Jul 15 11:32:19.870945 env[1206]: time="2025-07-15T11:32:19.870905075Z" level=info msg="StartContainer for \"03fe92d400b251c19ff393337a7088f8350ad72ad935f57d29235693b5b80cb9\" returns successfully" Jul 15 11:32:19.886984 env[1206]: time="2025-07-15T11:32:19.886897796Z" level=info msg="StartContainer for \"a934660784c1dbc106f1d14ed3caae3373bd1b9f076a1ffc0815e240a404e043\" returns successfully" Jul 15 11:32:20.279092 kubelet[1606]: I0715 11:32:20.278977 1606 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:32:20.660036 kubelet[1606]: E0715 11:32:20.659873 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:20.662891 kubelet[1606]: E0715 11:32:20.662855 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:20.672401 kubelet[1606]: E0715 11:32:20.672373 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:21.188000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:21.188000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005990000 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:32:21.188000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:21.188000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:21.188000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003ab21c0 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:32:21.188000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:21.188000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:21.188000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005990120 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:32:21.188000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:21.189000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:21.189000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c005910360 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:32:21.189000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:21.191000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:21.191000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c008235880 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:32:21.191000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:21.191000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:21.191000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c005910600 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:32:21.191000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:21.284000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:21.285000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:21.285000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00048e0c0 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:32:21.285000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:21.284000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0008426f0 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:32:21.284000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:21.450059 kubelet[1606]: I0715 11:32:21.449271 1606 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 15 11:32:21.597050 kubelet[1606]: I0715 11:32:21.596997 1606 apiserver.go:52] "Watching apiserver" Jul 15 11:32:21.629698 kubelet[1606]: I0715 11:32:21.629646 1606 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 15 11:32:21.670040 kubelet[1606]: E0715 11:32:21.670004 1606 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 15 11:32:21.670040 kubelet[1606]: E0715 11:32:21.670004 1606 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 15 11:32:21.670379 kubelet[1606]: E0715 11:32:21.670004 1606 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:21.670379 kubelet[1606]: E0715 11:32:21.670182 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:21.670379 kubelet[1606]: E0715 11:32:21.670182 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:21.670379 kubelet[1606]: E0715 11:32:21.670236 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:23.070582 kubelet[1606]: E0715 11:32:23.070545 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:23.667913 kubelet[1606]: E0715 11:32:23.667882 1606 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:24.257428 systemd[1]: Reloading. Jul 15 11:32:24.320111 /usr/lib/systemd/system-generators/torcx-generator[1897]: time="2025-07-15T11:32:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:32:24.320486 /usr/lib/systemd/system-generators/torcx-generator[1897]: time="2025-07-15T11:32:24Z" level=info msg="torcx already run" Jul 15 11:32:24.382247 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:32:24.382263 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:32:24.398493 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:32:24.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.467861 kernel: kauditd_printk_skb: 422 callbacks suppressed Jul 15 11:32:24.467944 kernel: audit: type=1400 audit(1752579144.466:540): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.473228 kernel: audit: type=1400 audit(1752579144.466:541): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.473272 kernel: audit: type=1400 audit(1752579144.466:542): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.478644 kernel: audit: type=1400 audit(1752579144.466:543): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.481458 kernel: audit: type=1400 audit(1752579144.466:544): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484304 kernel: audit: type=1400 audit(1752579144.466:545): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484353 kernel: audit: type=1400 audit(1752579144.466:546): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.487041 kernel: audit: type=1400 audit(1752579144.466:547): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.489764 kernel: audit: type=1400 audit(1752579144.466:548): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492438 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 15 11:32:24.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.469000 audit: BPF prog-id=79 op=LOAD Jul 15 11:32:24.469000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:32:24.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit: BPF prog-id=80 op=LOAD Jul 15 11:32:24.475000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.477000 audit: BPF prog-id=81 op=LOAD Jul 15 11:32:24.477000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:32:24.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.480000 audit: BPF prog-id=82 op=LOAD Jul 15 11:32:24.480000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:32:24.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.483000 audit: BPF prog-id=83 op=LOAD Jul 15 11:32:24.483000 audit: BPF prog-id=58 op=UNLOAD Jul 15 11:32:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.488000 audit: BPF prog-id=84 op=LOAD Jul 15 11:32:24.488000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:32:24.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit: BPF prog-id=85 op=LOAD Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.492000 audit: BPF prog-id=86 op=LOAD Jul 15 11:32:24.492000 audit: BPF prog-id=42 op=UNLOAD Jul 15 11:32:24.492000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit: BPF prog-id=87 op=LOAD Jul 15 11:32:24.494000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit: BPF prog-id=88 op=LOAD Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.494000 audit: BPF prog-id=89 op=LOAD Jul 15 11:32:24.494000 audit: BPF prog-id=45 op=UNLOAD Jul 15 11:32:24.494000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit: BPF prog-id=90 op=LOAD Jul 15 11:32:24.495000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit: BPF prog-id=91 op=LOAD Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.495000 audit: BPF prog-id=92 op=LOAD Jul 15 11:32:24.495000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:32:24.495000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.496000 audit: BPF prog-id=93 op=LOAD Jul 15 11:32:24.496000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.498000 audit: BPF prog-id=94 op=LOAD Jul 15 11:32:24.498000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.499000 audit: BPF prog-id=95 op=LOAD Jul 15 11:32:24.499000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:32:24.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit: BPF prog-id=96 op=LOAD Jul 15 11:32:24.500000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit: BPF prog-id=97 op=LOAD Jul 15 11:32:24.501000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit: BPF prog-id=98 op=LOAD Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.501000 audit: BPF prog-id=99 op=LOAD Jul 15 11:32:24.501000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:32:24.501000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:32:24.512207 systemd[1]: Stopping kubelet.service... Jul 15 11:32:24.541025 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:32:24.541162 systemd[1]: Stopped kubelet.service. Jul 15 11:32:24.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:24.542593 systemd[1]: Starting kubelet.service... Jul 15 11:32:24.622633 systemd[1]: Started kubelet.service. Jul 15 11:32:24.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:24.660489 kubelet[1944]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:32:24.660489 kubelet[1944]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 15 11:32:24.660489 kubelet[1944]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:32:24.660901 kubelet[1944]: I0715 11:32:24.660583 1944 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:32:24.666319 kubelet[1944]: I0715 11:32:24.666292 1944 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 15 11:32:24.666444 kubelet[1944]: I0715 11:32:24.666430 1944 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:32:24.667086 kubelet[1944]: I0715 11:32:24.667068 1944 server.go:934] "Client rotation is on, will bootstrap in background" Jul 15 11:32:24.669453 kubelet[1944]: I0715 11:32:24.669406 1944 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 15 11:32:24.671602 kubelet[1944]: I0715 11:32:24.671588 1944 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:32:24.673988 kubelet[1944]: E0715 11:32:24.673968 1944 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:32:24.674071 kubelet[1944]: I0715 11:32:24.674055 1944 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:32:24.676851 kubelet[1944]: I0715 11:32:24.676838 1944 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:32:24.676987 kubelet[1944]: I0715 11:32:24.676974 1944 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 15 11:32:24.677159 kubelet[1944]: I0715 11:32:24.677138 1944 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:32:24.677384 kubelet[1944]: I0715 11:32:24.677248 1944 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:32:24.677511 kubelet[1944]: I0715 11:32:24.677496 1944 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:32:24.677593 kubelet[1944]: I0715 11:32:24.677580 1944 container_manager_linux.go:300] "Creating device plugin manager" Jul 15 11:32:24.677675 kubelet[1944]: I0715 11:32:24.677663 1944 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:32:24.677814 kubelet[1944]: I0715 11:32:24.677802 1944 kubelet.go:408] "Attempting to sync node with API server" Jul 15 11:32:24.677919 kubelet[1944]: I0715 11:32:24.677903 1944 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:32:24.678021 kubelet[1944]: I0715 11:32:24.678006 1944 kubelet.go:314] "Adding apiserver pod source" Jul 15 11:32:24.678108 kubelet[1944]: I0715 11:32:24.678092 1944 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:32:24.678697 kubelet[1944]: I0715 11:32:24.678680 1944 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:32:24.682125 kubelet[1944]: I0715 11:32:24.682099 1944 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:32:24.682998 kubelet[1944]: I0715 11:32:24.682938 1944 server.go:1274] "Started kubelet" Jul 15 11:32:24.683000 audit[1944]: AVC avc: denied { mac_admin } for pid=1944 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.683000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:32:24.683000 audit[1944]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000767710 a1=c000765800 a2=c0007676e0 a3=25 items=0 ppid=1 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:24.683000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:32:24.683000 audit[1944]: AVC avc: denied { mac_admin } for pid=1944 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.683000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:32:24.683000 audit[1944]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cf4140 a1=c000765818 a2=c0007677a0 a3=25 items=0 ppid=1 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:24.683000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:32:24.685001 kubelet[1944]: I0715 11:32:24.684601 1944 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:32:24.685001 kubelet[1944]: I0715 11:32:24.684653 1944 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 15 11:32:24.685001 kubelet[1944]: I0715 11:32:24.684681 1944 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:32:24.686173 kubelet[1944]: E0715 11:32:24.686156 1944 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:32:24.689160 kubelet[1944]: I0715 11:32:24.688475 1944 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:32:24.689160 kubelet[1944]: I0715 11:32:24.688639 1944 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:32:24.689396 kubelet[1944]: I0715 11:32:24.689377 1944 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:32:24.690132 kubelet[1944]: I0715 11:32:24.690117 1944 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 15 11:32:24.690450 kubelet[1944]: E0715 11:32:24.690433 1944 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:24.690675 kubelet[1944]: I0715 11:32:24.690645 1944 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 15 11:32:24.691404 kubelet[1944]: I0715 11:32:24.691392 1944 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:32:24.694305 kubelet[1944]: I0715 11:32:24.694294 1944 server.go:449] "Adding debug handlers to kubelet server" Jul 15 11:32:24.695808 kubelet[1944]: I0715 11:32:24.695793 1944 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:32:24.703250 kubelet[1944]: I0715 11:32:24.703233 1944 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:32:24.703348 kubelet[1944]: I0715 11:32:24.703335 1944 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:32:24.703510 kubelet[1944]: I0715 11:32:24.703492 1944 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:32:24.705506 kubelet[1944]: I0715 11:32:24.705442 1944 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:32:24.706430 kubelet[1944]: I0715 11:32:24.706403 1944 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:32:24.706430 kubelet[1944]: I0715 11:32:24.706426 1944 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 15 11:32:24.706495 kubelet[1944]: I0715 11:32:24.706447 1944 kubelet.go:2321] "Starting kubelet main sync loop" Jul 15 11:32:24.706539 kubelet[1944]: E0715 11:32:24.706490 1944 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:32:24.728904 kubelet[1944]: I0715 11:32:24.728884 1944 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 15 11:32:24.729041 kubelet[1944]: I0715 11:32:24.729025 1944 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 15 11:32:24.729116 kubelet[1944]: I0715 11:32:24.729104 1944 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:32:24.729284 kubelet[1944]: I0715 11:32:24.729271 1944 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:32:24.729365 kubelet[1944]: I0715 11:32:24.729339 1944 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:32:24.729431 kubelet[1944]: I0715 11:32:24.729419 1944 policy_none.go:49] "None policy: Start" Jul 15 11:32:24.729985 kubelet[1944]: I0715 11:32:24.729964 1944 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 15 11:32:24.730039 kubelet[1944]: I0715 11:32:24.729988 1944 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:32:24.730141 kubelet[1944]: I0715 11:32:24.730127 1944 state_mem.go:75] "Updated machine memory state" Jul 15 11:32:24.734180 kubelet[1944]: I0715 11:32:24.734153 1944 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:32:24.733000 audit[1944]: AVC avc: denied { mac_admin } for pid=1944 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:24.733000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:32:24.733000 audit[1944]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007661e0 a1=c000e443d8 a2=c0007661b0 a3=25 items=0 ppid=1 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:24.733000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:32:24.734390 kubelet[1944]: I0715 11:32:24.734203 1944 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:32:24.734390 kubelet[1944]: I0715 11:32:24.734300 1944 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:32:24.734390 kubelet[1944]: I0715 11:32:24.734308 1944 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:32:24.734458 kubelet[1944]: I0715 11:32:24.734453 1944 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:32:24.813533 kubelet[1944]: E0715 11:32:24.813420 1944 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:32:24.836932 kubelet[1944]: I0715 11:32:24.836909 1944 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:32:24.841576 kubelet[1944]: I0715 11:32:24.841549 1944 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 15 11:32:24.841710 kubelet[1944]: I0715 11:32:24.841614 1944 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 15 11:32:24.892473 kubelet[1944]: I0715 11:32:24.892434 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/43b106ce26b08d4a03685ab04d2aaaba-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"43b106ce26b08d4a03685ab04d2aaaba\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:32:24.892473 kubelet[1944]: I0715 11:32:24.892463 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:24.892473 kubelet[1944]: I0715 11:32:24.892480 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:24.892473 kubelet[1944]: I0715 11:32:24.892495 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:32:24.892776 kubelet[1944]: I0715 11:32:24.892508 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/43b106ce26b08d4a03685ab04d2aaaba-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"43b106ce26b08d4a03685ab04d2aaaba\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:32:24.892776 kubelet[1944]: I0715 11:32:24.892529 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/43b106ce26b08d4a03685ab04d2aaaba-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"43b106ce26b08d4a03685ab04d2aaaba\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:32:24.892776 kubelet[1944]: I0715 11:32:24.892543 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:24.892776 kubelet[1944]: I0715 11:32:24.892560 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:24.892776 kubelet[1944]: I0715 11:32:24.892577 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:25.112966 kubelet[1944]: E0715 11:32:25.112843 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:25.113781 kubelet[1944]: E0715 11:32:25.113220 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:25.113943 kubelet[1944]: E0715 11:32:25.113845 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:25.487000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:32:25.487000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00084d800 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:32:25.487000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:25.678966 kubelet[1944]: I0715 11:32:25.678919 1944 apiserver.go:52] "Watching apiserver" Jul 15 11:32:25.691630 kubelet[1944]: I0715 11:32:25.691596 1944 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 15 11:32:25.717091 kubelet[1944]: E0715 11:32:25.717067 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:25.722189 kubelet[1944]: E0715 11:32:25.722151 1944 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:32:25.722360 kubelet[1944]: E0715 11:32:25.722339 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:25.723156 kubelet[1944]: E0715 11:32:25.723130 1944 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:32:25.723752 kubelet[1944]: E0715 11:32:25.723722 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:25.734923 kubelet[1944]: I0715 11:32:25.734868 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.734851336 podStartE2EDuration="1.734851336s" podCreationTimestamp="2025-07-15 11:32:24 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:32:25.734566007 +0000 UTC m=+1.108710151" watchObservedRunningTime="2025-07-15 11:32:25.734851336 +0000 UTC m=+1.108995480" Jul 15 11:32:25.748347 kubelet[1944]: I0715 11:32:25.748229 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.748209238 podStartE2EDuration="1.748209238s" podCreationTimestamp="2025-07-15 11:32:24 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:32:25.741250944 +0000 UTC m=+1.115395088" watchObservedRunningTime="2025-07-15 11:32:25.748209238 +0000 UTC m=+1.122353392" Jul 15 11:32:25.754853 kubelet[1944]: I0715 11:32:25.754276 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=3.7542615980000003 podStartE2EDuration="3.754261598s" podCreationTimestamp="2025-07-15 11:32:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:32:25.748166947 +0000 UTC m=+1.122311101" watchObservedRunningTime="2025-07-15 11:32:25.754261598 +0000 UTC m=+1.128405742" Jul 15 11:32:25.867000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:25.867000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00048f3e0 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:32:25.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:25.867000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:25.867000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c96ea0 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:32:25.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:25.867000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:25.867000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00048f5a0 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:32:25.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:25.867000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:25.867000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000aa6b80 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:32:25.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:26.717363 kubelet[1944]: E0715 11:32:26.717324 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:26.717715 kubelet[1944]: E0715 11:32:26.717381 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:28.260089 kubelet[1944]: E0715 11:32:28.260050 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:30.452587 kubelet[1944]: I0715 11:32:30.452546 1944 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:32:30.453013 env[1206]: time="2025-07-15T11:32:30.452981247Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:32:30.453229 kubelet[1944]: I0715 11:32:30.453198 1944 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:32:31.134290 systemd[1]: Created slice kubepods-besteffort-pod5262f7db_967d_4ef2_ac61_04fde46e8165.slice. Jul 15 11:32:31.192589 systemd[1]: Created slice kubepods-besteffort-poddcab0c13_3281_49e9_b87c_cd00a70292a7.slice. Jul 15 11:32:31.232279 kubelet[1944]: I0715 11:32:31.232229 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4lbt9\" (UniqueName: \"kubernetes.io/projected/dcab0c13-3281-49e9-b87c-cd00a70292a7-kube-api-access-4lbt9\") pod \"tigera-operator-5bf8dfcb4-jg6n8\" (UID: \"dcab0c13-3281-49e9-b87c-cd00a70292a7\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-jg6n8" Jul 15 11:32:31.232279 kubelet[1944]: I0715 11:32:31.232260 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5262f7db-967d-4ef2-ac61-04fde46e8165-lib-modules\") pod \"kube-proxy-htclq\" (UID: \"5262f7db-967d-4ef2-ac61-04fde46e8165\") " pod="kube-system/kube-proxy-htclq" Jul 15 11:32:31.232279 kubelet[1944]: I0715 11:32:31.232276 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zm9bp\" (UniqueName: \"kubernetes.io/projected/5262f7db-967d-4ef2-ac61-04fde46e8165-kube-api-access-zm9bp\") pod \"kube-proxy-htclq\" (UID: \"5262f7db-967d-4ef2-ac61-04fde46e8165\") " pod="kube-system/kube-proxy-htclq" Jul 15 11:32:31.232537 kubelet[1944]: I0715 11:32:31.232295 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/5262f7db-967d-4ef2-ac61-04fde46e8165-kube-proxy\") pod \"kube-proxy-htclq\" (UID: \"5262f7db-967d-4ef2-ac61-04fde46e8165\") " pod="kube-system/kube-proxy-htclq" Jul 15 11:32:31.232537 kubelet[1944]: I0715 11:32:31.232336 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5262f7db-967d-4ef2-ac61-04fde46e8165-xtables-lock\") pod \"kube-proxy-htclq\" (UID: \"5262f7db-967d-4ef2-ac61-04fde46e8165\") " pod="kube-system/kube-proxy-htclq" Jul 15 11:32:31.232537 kubelet[1944]: I0715 11:32:31.232351 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/dcab0c13-3281-49e9-b87c-cd00a70292a7-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-jg6n8\" (UID: \"dcab0c13-3281-49e9-b87c-cd00a70292a7\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-jg6n8" Jul 15 11:32:31.337711 kubelet[1944]: I0715 11:32:31.337678 1944 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:32:31.441616 kubelet[1944]: E0715 11:32:31.441501 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:31.442389 env[1206]: time="2025-07-15T11:32:31.441997694Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-htclq,Uid:5262f7db-967d-4ef2-ac61-04fde46e8165,Namespace:kube-system,Attempt:0,}" Jul 15 11:32:31.456973 env[1206]: time="2025-07-15T11:32:31.456906095Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:31.456973 env[1206]: time="2025-07-15T11:32:31.456946161Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:31.456973 env[1206]: time="2025-07-15T11:32:31.456959987Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:31.457305 env[1206]: time="2025-07-15T11:32:31.457106286Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4466449fcb12f95717f3085870d16170bf374ccb1f4fc82a542296f81a5865ff pid=2000 runtime=io.containerd.runc.v2 Jul 15 11:32:31.469494 systemd[1]: Started cri-containerd-4466449fcb12f95717f3085870d16170bf374ccb1f4fc82a542296f81a5865ff.scope. Jul 15 11:32:31.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482490 kernel: kauditd_printk_skb: 265 callbacks suppressed Jul 15 11:32:31.482542 kernel: audit: type=1400 audit(1752579151.478:793): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482569 kernel: audit: type=1400 audit(1752579151.478:794): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.488032 kernel: audit: type=1400 audit(1752579151.478:795): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.488083 kernel: audit: type=1400 audit(1752579151.478:796): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.493563 kernel: audit: type=1400 audit(1752579151.478:797): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.493622 kernel: audit: type=1400 audit(1752579151.478:798): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.496134 env[1206]: time="2025-07-15T11:32:31.496096958Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-jg6n8,Uid:dcab0c13-3281-49e9-b87c-cd00a70292a7,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:32:31.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.499621 kernel: audit: type=1400 audit(1752579151.478:799): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.499677 kernel: audit: type=1400 audit(1752579151.478:800): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.505740 kernel: audit: type=1400 audit(1752579151.478:801): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.508869 kernel: audit: type=1400 audit(1752579151.481:802): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.511557 env[1206]: time="2025-07-15T11:32:31.511478211Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:31.511638 env[1206]: time="2025-07-15T11:32:31.511563804Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:31.511638 env[1206]: time="2025-07-15T11:32:31.511599933Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:31.481000 audit: BPF prog-id=100 op=LOAD Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2000 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434363634343966636231326639353731376633303835383730643136 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2000 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434363634343966636231326639353731376633303835383730643136 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.482000 audit: BPF prog-id=101 op=LOAD Jul 15 11:32:31.482000 audit[2009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00034c4a0 items=0 ppid=2000 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434363634343966636231326639353731376633303835383730643136 Jul 15 11:32:31.484000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.484000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.484000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.484000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.484000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.484000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.484000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.484000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.484000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.484000 audit: BPF prog-id=102 op=LOAD Jul 15 11:32:31.484000 audit[2009]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00034c4e8 items=0 ppid=2000 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434363634343966636231326639353731376633303835383730643136 Jul 15 11:32:31.489000 audit: BPF prog-id=102 op=UNLOAD Jul 15 11:32:31.489000 audit: BPF prog-id=101 op=UNLOAD Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { perfmon } for pid=2009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit[2009]: AVC avc: denied { bpf } for pid=2009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.490000 audit: BPF prog-id=103 op=LOAD Jul 15 11:32:31.490000 audit[2009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00034c8f8 items=0 ppid=2000 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434363634343966636231326639353731376633303835383730643136 Jul 15 11:32:31.513151 env[1206]: time="2025-07-15T11:32:31.511803872Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/51babb8cc9e6841009f85d7a71f953fa31fded127a857500b02854825cb09e58 pid=2035 runtime=io.containerd.runc.v2 Jul 15 11:32:31.515211 env[1206]: time="2025-07-15T11:32:31.514971014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-htclq,Uid:5262f7db-967d-4ef2-ac61-04fde46e8165,Namespace:kube-system,Attempt:0,} returns sandbox id \"4466449fcb12f95717f3085870d16170bf374ccb1f4fc82a542296f81a5865ff\"" Jul 15 11:32:31.515620 kubelet[1944]: E0715 11:32:31.515580 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:31.521509 env[1206]: time="2025-07-15T11:32:31.520554235Z" level=info msg="CreateContainer within sandbox \"4466449fcb12f95717f3085870d16170bf374ccb1f4fc82a542296f81a5865ff\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:32:31.521347 systemd[1]: Started cri-containerd-51babb8cc9e6841009f85d7a71f953fa31fded127a857500b02854825cb09e58.scope. Jul 15 11:32:31.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit: BPF prog-id=104 op=LOAD Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2035 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626162623863633965363834313030396638356437613731663935 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2035 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626162623863633965363834313030396638356437613731663935 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit: BPF prog-id=105 op=LOAD Jul 15 11:32:31.533000 audit[2051]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003fec10 items=0 ppid=2035 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626162623863633965363834313030396638356437613731663935 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit: BPF prog-id=106 op=LOAD Jul 15 11:32:31.533000 audit[2051]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003fec58 items=0 ppid=2035 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626162623863633965363834313030396638356437613731663935 Jul 15 11:32:31.533000 audit: BPF prog-id=106 op=UNLOAD Jul 15 11:32:31.533000 audit: BPF prog-id=105 op=UNLOAD Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.533000 audit: BPF prog-id=107 op=LOAD Jul 15 11:32:31.533000 audit[2051]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003ff068 items=0 ppid=2035 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626162623863633965363834313030396638356437613731663935 Jul 15 11:32:31.541199 env[1206]: time="2025-07-15T11:32:31.541157409Z" level=info msg="CreateContainer within sandbox \"4466449fcb12f95717f3085870d16170bf374ccb1f4fc82a542296f81a5865ff\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"1b1661ecb34db3e6263191ade0b5baf1493bfc191576d19b663c2b6f69769721\"" Jul 15 11:32:31.542583 env[1206]: time="2025-07-15T11:32:31.541725613Z" level=info msg="StartContainer for \"1b1661ecb34db3e6263191ade0b5baf1493bfc191576d19b663c2b6f69769721\"" Jul 15 11:32:31.558221 env[1206]: time="2025-07-15T11:32:31.558163551Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-jg6n8,Uid:dcab0c13-3281-49e9-b87c-cd00a70292a7,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"51babb8cc9e6841009f85d7a71f953fa31fded127a857500b02854825cb09e58\"" Jul 15 11:32:31.559957 env[1206]: time="2025-07-15T11:32:31.559915754Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:32:31.567229 systemd[1]: Started cri-containerd-1b1661ecb34db3e6263191ade0b5baf1493bfc191576d19b663c2b6f69769721.scope. Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fcd7583eb58 items=0 ppid=2000 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313636316563623334646233653632363331393161646530623562 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.581000 audit: BPF prog-id=108 op=LOAD Jul 15 11:32:31.581000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002d3ba8 items=0 ppid=2000 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313636316563623334646233653632363331393161646530623562 Jul 15 11:32:31.582000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.582000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.582000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.582000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.582000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.582000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.582000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.582000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.582000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.582000 audit: BPF prog-id=109 op=LOAD Jul 15 11:32:31.582000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002d3bf8 items=0 ppid=2000 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313636316563623334646233653632363331393161646530623562 Jul 15 11:32:31.582000 audit: BPF prog-id=109 op=UNLOAD Jul 15 11:32:31.583000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:31.583000 audit: BPF prog-id=110 op=LOAD Jul 15 11:32:31.583000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002d3c88 items=0 ppid=2000 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313636316563623334646233653632363331393161646530623562 Jul 15 11:32:31.606980 env[1206]: time="2025-07-15T11:32:31.606933570Z" level=info msg="StartContainer for \"1b1661ecb34db3e6263191ade0b5baf1493bfc191576d19b663c2b6f69769721\" returns successfully" Jul 15 11:32:31.708000 audit[2147]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.708000 audit[2147]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffca5402d80 a2=0 a3=7ffca5402d6c items=0 ppid=2094 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.708000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:32:31.709000 audit[2146]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.709000 audit[2146]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe84381aa0 a2=0 a3=7ffe84381a8c items=0 ppid=2094 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.709000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:32:31.712000 audit[2150]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.712000 audit[2150]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcac5f17a0 a2=0 a3=7ffcac5f178c items=0 ppid=2094 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.712000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:32:31.713000 audit[2151]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.713000 audit[2151]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc60c21370 a2=0 a3=7ffc60c2135c items=0 ppid=2094 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.713000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:32:31.714000 audit[2149]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.714000 audit[2149]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd076eda20 a2=0 a3=7ffd076eda0c items=0 ppid=2094 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.714000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:32:31.715000 audit[2152]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.715000 audit[2152]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff04738ee0 a2=0 a3=7fff04738ecc items=0 ppid=2094 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.715000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:32:31.725221 kubelet[1944]: E0715 11:32:31.725180 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:31.812000 audit[2153]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.812000 audit[2153]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffce3d2f360 a2=0 a3=7ffce3d2f34c items=0 ppid=2094 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.812000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:32:31.815000 audit[2155]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.815000 audit[2155]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc5b2f2070 a2=0 a3=7ffc5b2f205c items=0 ppid=2094 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.815000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:32:31.819000 audit[2158]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.819000 audit[2158]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdd69e9020 a2=0 a3=7ffdd69e900c items=0 ppid=2094 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.819000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:32:31.820000 audit[2159]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.820000 audit[2159]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdd02da4e0 a2=0 a3=7ffdd02da4cc items=0 ppid=2094 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.820000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:32:31.822000 audit[2161]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.822000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc1f35b970 a2=0 a3=7ffc1f35b95c items=0 ppid=2094 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.822000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:32:31.823000 audit[2162]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.823000 audit[2162]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc450064d0 a2=0 a3=7ffc450064bc items=0 ppid=2094 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.823000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:32:31.825000 audit[2164]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.825000 audit[2164]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd3c7ceb40 a2=0 a3=7ffd3c7ceb2c items=0 ppid=2094 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.825000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:32:31.827000 audit[2167]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.827000 audit[2167]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff46237c90 a2=0 a3=7fff46237c7c items=0 ppid=2094 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.827000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:32:31.828000 audit[2168]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.828000 audit[2168]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0b991280 a2=0 a3=7fff0b99126c items=0 ppid=2094 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.828000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:32:31.830000 audit[2170]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.830000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd921f8150 a2=0 a3=7ffd921f813c items=0 ppid=2094 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.830000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:32:31.831000 audit[2171]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.831000 audit[2171]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9f89c1b0 a2=0 a3=7ffd9f89c19c items=0 ppid=2094 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.831000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:32:31.833000 audit[2173]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.833000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffefd7dba0 a2=0 a3=7fffefd7db8c items=0 ppid=2094 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.833000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:32:31.835000 audit[2176]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.835000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd18600c30 a2=0 a3=7ffd18600c1c items=0 ppid=2094 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.835000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:32:31.838000 audit[2179]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.838000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe4f8e3410 a2=0 a3=7ffe4f8e33fc items=0 ppid=2094 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:32:31.839000 audit[2180]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.839000 audit[2180]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff675abf60 a2=0 a3=7fff675abf4c items=0 ppid=2094 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.839000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:32:31.841000 audit[2182]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.841000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffd13015d0 a2=0 a3=7fffd13015bc items=0 ppid=2094 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.841000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:32:31.843000 audit[2185]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.843000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc0331a310 a2=0 a3=7ffc0331a2fc items=0 ppid=2094 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.843000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:32:31.844000 audit[2186]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.844000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdfc6b9ed0 a2=0 a3=7ffdfc6b9ebc items=0 ppid=2094 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.844000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:32:31.846000 audit[2188]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:31.846000 audit[2188]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffca0062d90 a2=0 a3=7ffca0062d7c items=0 ppid=2094 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.846000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:32:31.866000 audit[2194]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:31.866000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffca8af2d10 a2=0 a3=7ffca8af2cfc items=0 ppid=2094 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.866000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:31.874000 audit[2194]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:31.874000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffca8af2d10 a2=0 a3=7ffca8af2cfc items=0 ppid=2094 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.874000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:31.876000 audit[2199]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.876000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe21a693c0 a2=0 a3=7ffe21a693ac items=0 ppid=2094 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.876000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:32:31.877000 audit[2201]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.877000 audit[2201]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffc67bc060 a2=0 a3=7fffc67bc04c items=0 ppid=2094 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.877000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:32:31.880000 audit[2204]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.880000 audit[2204]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd85eb2a10 a2=0 a3=7ffd85eb29fc items=0 ppid=2094 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.880000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:32:31.881000 audit[2205]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.881000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1403d450 a2=0 a3=7fff1403d43c items=0 ppid=2094 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.881000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:32:31.883000 audit[2207]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2207 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.883000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd2ae89320 a2=0 a3=7ffd2ae8930c items=0 ppid=2094 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.883000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:32:31.884000 audit[2208]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.884000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd1ba3d00 a2=0 a3=7ffcd1ba3cec items=0 ppid=2094 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.884000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:32:31.887000 audit[2210]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.887000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe6eaed580 a2=0 a3=7ffe6eaed56c items=0 ppid=2094 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.887000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:32:31.890000 audit[2213]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.890000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffdbdb21650 a2=0 a3=7ffdbdb2163c items=0 ppid=2094 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.890000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:32:31.891000 audit[2214]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.891000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1640ea50 a2=0 a3=7fff1640ea3c items=0 ppid=2094 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.891000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:32:31.893000 audit[2216]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.893000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd7a621e60 a2=0 a3=7ffd7a621e4c items=0 ppid=2094 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.893000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:32:31.894000 audit[2217]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.894000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc78e43b60 a2=0 a3=7ffc78e43b4c items=0 ppid=2094 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.894000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:32:31.896000 audit[2219]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.896000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdf2b50060 a2=0 a3=7ffdf2b5004c items=0 ppid=2094 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.896000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:32:31.899000 audit[2222]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.899000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff0e6a0890 a2=0 a3=7fff0e6a087c items=0 ppid=2094 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.899000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:32:31.902000 audit[2225]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.902000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcb2367090 a2=0 a3=7ffcb236707c items=0 ppid=2094 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.902000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:32:31.903000 audit[2226]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.903000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffb1b2c800 a2=0 a3=7fffb1b2c7ec items=0 ppid=2094 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.903000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:32:31.905000 audit[2228]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.905000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe44b5aad0 a2=0 a3=7ffe44b5aabc items=0 ppid=2094 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.905000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:32:31.908000 audit[2231]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.908000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd7c67d780 a2=0 a3=7ffd7c67d76c items=0 ppid=2094 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.908000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:32:31.909000 audit[2232]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.909000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb704ec60 a2=0 a3=7ffeb704ec4c items=0 ppid=2094 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.909000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:32:31.911000 audit[2234]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.911000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff588d12d0 a2=0 a3=7fff588d12bc items=0 ppid=2094 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:32:31.912000 audit[2235]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.912000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd49ee260 a2=0 a3=7ffcd49ee24c items=0 ppid=2094 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.912000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:32:31.913000 audit[2237]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.913000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd39bc3520 a2=0 a3=7ffd39bc350c items=0 ppid=2094 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.913000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:32:31.916000 audit[2240]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:31.916000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd19e4f3c0 a2=0 a3=7ffd19e4f3ac items=0 ppid=2094 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.916000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:32:31.919000 audit[2242]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:32:31.919000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffc256a6ad0 a2=0 a3=7ffc256a6abc items=0 ppid=2094 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.919000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:31.919000 audit[2242]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:32:31.919000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffc256a6ad0 a2=0 a3=7ffc256a6abc items=0 ppid=2094 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:31.919000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:33.066798 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1680433594.mount: Deactivated successfully. Jul 15 11:32:34.059374 env[1206]: time="2025-07-15T11:32:34.059335285Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:34.061149 env[1206]: time="2025-07-15T11:32:34.061120581Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:34.062562 env[1206]: time="2025-07-15T11:32:34.062533828Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:34.063916 env[1206]: time="2025-07-15T11:32:34.063885469Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:34.064455 env[1206]: time="2025-07-15T11:32:34.064427369Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 15 11:32:34.066179 env[1206]: time="2025-07-15T11:32:34.066147842Z" level=info msg="CreateContainer within sandbox \"51babb8cc9e6841009f85d7a71f953fa31fded127a857500b02854825cb09e58\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:32:34.077972 env[1206]: time="2025-07-15T11:32:34.077934979Z" level=info msg="CreateContainer within sandbox \"51babb8cc9e6841009f85d7a71f953fa31fded127a857500b02854825cb09e58\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"83e2cb30b2a1e0d39fc8d31ba756a9d38238cb565d64f951ec39a24cf437b4fa\"" Jul 15 11:32:34.078306 env[1206]: time="2025-07-15T11:32:34.078285245Z" level=info msg="StartContainer for \"83e2cb30b2a1e0d39fc8d31ba756a9d38238cb565d64f951ec39a24cf437b4fa\"" Jul 15 11:32:34.092523 systemd[1]: Started cri-containerd-83e2cb30b2a1e0d39fc8d31ba756a9d38238cb565d64f951ec39a24cf437b4fa.scope. Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit: BPF prog-id=111 op=LOAD Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2035 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:34.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653263623330623261316530643339666338643331626137353661 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2035 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:34.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653263623330623261316530643339666338643331626137353661 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit: BPF prog-id=112 op=LOAD Jul 15 11:32:34.100000 audit[2250]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000388370 items=0 ppid=2035 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:34.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653263623330623261316530643339666338643331626137353661 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.100000 audit: BPF prog-id=113 op=LOAD Jul 15 11:32:34.100000 audit[2250]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003883b8 items=0 ppid=2035 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:34.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653263623330623261316530643339666338643331626137353661 Jul 15 11:32:34.100000 audit: BPF prog-id=113 op=UNLOAD Jul 15 11:32:34.100000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { perfmon } for pid=2250 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit[2250]: AVC avc: denied { bpf } for pid=2250 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:34.101000 audit: BPF prog-id=114 op=LOAD Jul 15 11:32:34.101000 audit[2250]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003887c8 items=0 ppid=2035 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:34.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653263623330623261316530643339666338643331626137353661 Jul 15 11:32:34.111635 env[1206]: time="2025-07-15T11:32:34.111581119Z" level=info msg="StartContainer for \"83e2cb30b2a1e0d39fc8d31ba756a9d38238cb565d64f951ec39a24cf437b4fa\" returns successfully" Jul 15 11:32:34.737998 kubelet[1944]: I0715 11:32:34.737940 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-htclq" podStartSLOduration=3.737922236 podStartE2EDuration="3.737922236s" podCreationTimestamp="2025-07-15 11:32:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:32:31.734411356 +0000 UTC m=+7.108555500" watchObservedRunningTime="2025-07-15 11:32:34.737922236 +0000 UTC m=+10.112066380" Jul 15 11:32:34.894766 kubelet[1944]: E0715 11:32:34.894695 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:34.905902 kubelet[1944]: I0715 11:32:34.905848 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-jg6n8" podStartSLOduration=1.400004608 podStartE2EDuration="3.905818323s" podCreationTimestamp="2025-07-15 11:32:31 +0000 UTC" firstStartedPulling="2025-07-15 11:32:31.559338904 +0000 UTC m=+6.933483048" lastFinishedPulling="2025-07-15 11:32:34.065152619 +0000 UTC m=+9.439296763" observedRunningTime="2025-07-15 11:32:34.738067633 +0000 UTC m=+10.112211777" watchObservedRunningTime="2025-07-15 11:32:34.905818323 +0000 UTC m=+10.279962467" Jul 15 11:32:35.212157 kubelet[1944]: E0715 11:32:35.212122 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:35.732438 kubelet[1944]: E0715 11:32:35.732403 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:36.847634 update_engine[1196]: I0715 11:32:36.847574 1196 update_attempter.cc:509] Updating boot flags... Jul 15 11:32:38.274398 kubelet[1944]: E0715 11:32:38.274368 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:41.414187 sudo[1342]: pam_unix(sudo:session): session closed for user root Jul 15 11:32:41.419425 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 15 11:32:41.419582 kernel: audit: type=1106 audit(1752579161.412:904): pid=1342 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:32:41.412000 audit[1342]: USER_END pid=1342 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:32:41.412000 audit[1342]: CRED_DISP pid=1342 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:32:41.423130 sshd[1339]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:41.423880 kernel: audit: type=1104 audit(1752579161.412:905): pid=1342 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:32:41.422000 audit[1339]: USER_END pid=1339 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:41.422000 audit[1339]: CRED_DISP pid=1339 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:41.425390 systemd[1]: sshd@6-10.0.0.85:22-10.0.0.1:33422.service: Deactivated successfully. Jul 15 11:32:41.426089 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:32:41.426205 systemd[1]: session-7.scope: Consumed 4.024s CPU time. Jul 15 11:32:41.432475 kernel: audit: type=1106 audit(1752579161.422:906): pid=1339 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:41.432537 kernel: audit: type=1104 audit(1752579161.422:907): pid=1339 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:41.432505 systemd-logind[1195]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:32:41.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.85:22-10.0.0.1:33422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:41.436447 kernel: audit: type=1131 audit(1752579161.423:908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.85:22-10.0.0.1:33422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:41.436809 systemd-logind[1195]: Removed session 7. Jul 15 11:32:41.642096 kernel: audit: type=1325 audit(1752579161.632:909): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:41.642318 kernel: audit: type=1300 audit(1752579161.632:909): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff603354e0 a2=0 a3=7fff603354cc items=0 ppid=2094 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:41.632000 audit[2354]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:41.632000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff603354e0 a2=0 a3=7fff603354cc items=0 ppid=2094 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:41.645087 kernel: audit: type=1327 audit(1752579161.632:909): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:41.632000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:41.651000 audit[2354]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:41.651000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff603354e0 a2=0 a3=0 items=0 ppid=2094 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:41.662180 kernel: audit: type=1325 audit(1752579161.651:910): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:41.662330 kernel: audit: type=1300 audit(1752579161.651:910): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff603354e0 a2=0 a3=0 items=0 ppid=2094 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:41.651000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:41.670000 audit[2356]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:41.670000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff326c4f60 a2=0 a3=7fff326c4f4c items=0 ppid=2094 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:41.670000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:41.674000 audit[2356]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:41.674000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff326c4f60 a2=0 a3=0 items=0 ppid=2094 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:41.674000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:44.617000 audit[2359]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:44.617000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe1c8a8b20 a2=0 a3=7ffe1c8a8b0c items=0 ppid=2094 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:44.617000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:44.621000 audit[2359]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:44.621000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe1c8a8b20 a2=0 a3=0 items=0 ppid=2094 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:44.621000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:44.637204 systemd[1]: Created slice kubepods-besteffort-podbfdcaa31_6294_4d91_a963_1c9b2505fc97.slice. Jul 15 11:32:44.635000 audit[2361]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:44.635000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcc4a77740 a2=0 a3=7ffcc4a7772c items=0 ppid=2094 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:44.635000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:44.641000 audit[2361]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:44.641000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcc4a77740 a2=0 a3=0 items=0 ppid=2094 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:44.641000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:44.718973 kubelet[1944]: I0715 11:32:44.718922 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/bfdcaa31-6294-4d91-a963-1c9b2505fc97-typha-certs\") pod \"calico-typha-6cfcf79796-84dwh\" (UID: \"bfdcaa31-6294-4d91-a963-1c9b2505fc97\") " pod="calico-system/calico-typha-6cfcf79796-84dwh" Jul 15 11:32:44.718973 kubelet[1944]: I0715 11:32:44.718971 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bfdcaa31-6294-4d91-a963-1c9b2505fc97-tigera-ca-bundle\") pod \"calico-typha-6cfcf79796-84dwh\" (UID: \"bfdcaa31-6294-4d91-a963-1c9b2505fc97\") " pod="calico-system/calico-typha-6cfcf79796-84dwh" Jul 15 11:32:44.719400 kubelet[1944]: I0715 11:32:44.719004 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fggdr\" (UniqueName: \"kubernetes.io/projected/bfdcaa31-6294-4d91-a963-1c9b2505fc97-kube-api-access-fggdr\") pod \"calico-typha-6cfcf79796-84dwh\" (UID: \"bfdcaa31-6294-4d91-a963-1c9b2505fc97\") " pod="calico-system/calico-typha-6cfcf79796-84dwh" Jul 15 11:32:44.725155 systemd[1]: Created slice kubepods-besteffort-podf664e537_f396_49ed_88f2_1f74266ef368.slice. Jul 15 11:32:44.819465 kubelet[1944]: I0715 11:32:44.819401 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/f664e537-f396-49ed-88f2-1f74266ef368-cni-bin-dir\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819465 kubelet[1944]: I0715 11:32:44.819462 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f664e537-f396-49ed-88f2-1f74266ef368-xtables-lock\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819669 kubelet[1944]: I0715 11:32:44.819480 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/f664e537-f396-49ed-88f2-1f74266ef368-policysync\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819669 kubelet[1944]: I0715 11:32:44.819499 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/f664e537-f396-49ed-88f2-1f74266ef368-cni-log-dir\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819669 kubelet[1944]: I0715 11:32:44.819519 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/f664e537-f396-49ed-88f2-1f74266ef368-node-certs\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819669 kubelet[1944]: I0715 11:32:44.819552 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f664e537-f396-49ed-88f2-1f74266ef368-var-lib-calico\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819669 kubelet[1944]: I0715 11:32:44.819573 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qchbs\" (UniqueName: \"kubernetes.io/projected/f664e537-f396-49ed-88f2-1f74266ef368-kube-api-access-qchbs\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819794 kubelet[1944]: I0715 11:32:44.819609 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/f664e537-f396-49ed-88f2-1f74266ef368-cni-net-dir\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819794 kubelet[1944]: I0715 11:32:44.819629 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/f664e537-f396-49ed-88f2-1f74266ef368-flexvol-driver-host\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819794 kubelet[1944]: I0715 11:32:44.819645 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f664e537-f396-49ed-88f2-1f74266ef368-lib-modules\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819794 kubelet[1944]: I0715 11:32:44.819673 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f664e537-f396-49ed-88f2-1f74266ef368-tigera-ca-bundle\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.819794 kubelet[1944]: I0715 11:32:44.819694 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/f664e537-f396-49ed-88f2-1f74266ef368-var-run-calico\") pod \"calico-node-6rw4f\" (UID: \"f664e537-f396-49ed-88f2-1f74266ef368\") " pod="calico-system/calico-node-6rw4f" Jul 15 11:32:44.837969 kubelet[1944]: E0715 11:32:44.837916 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:32:44.920220 kubelet[1944]: I0715 11:32:44.920081 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/f4300a85-d6b1-4be7-b787-3060531fee25-kubelet-dir\") pod \"csi-node-driver-92bfv\" (UID: \"f4300a85-d6b1-4be7-b787-3060531fee25\") " pod="calico-system/csi-node-driver-92bfv" Jul 15 11:32:44.920220 kubelet[1944]: I0715 11:32:44.920134 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pc798\" (UniqueName: \"kubernetes.io/projected/f4300a85-d6b1-4be7-b787-3060531fee25-kube-api-access-pc798\") pod \"csi-node-driver-92bfv\" (UID: \"f4300a85-d6b1-4be7-b787-3060531fee25\") " pod="calico-system/csi-node-driver-92bfv" Jul 15 11:32:44.920220 kubelet[1944]: I0715 11:32:44.920160 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/f4300a85-d6b1-4be7-b787-3060531fee25-varrun\") pod \"csi-node-driver-92bfv\" (UID: \"f4300a85-d6b1-4be7-b787-3060531fee25\") " pod="calico-system/csi-node-driver-92bfv" Jul 15 11:32:44.920439 kubelet[1944]: I0715 11:32:44.920279 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/f4300a85-d6b1-4be7-b787-3060531fee25-socket-dir\") pod \"csi-node-driver-92bfv\" (UID: \"f4300a85-d6b1-4be7-b787-3060531fee25\") " pod="calico-system/csi-node-driver-92bfv" Jul 15 11:32:44.920742 kubelet[1944]: I0715 11:32:44.920685 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/f4300a85-d6b1-4be7-b787-3060531fee25-registration-dir\") pod \"csi-node-driver-92bfv\" (UID: \"f4300a85-d6b1-4be7-b787-3060531fee25\") " pod="calico-system/csi-node-driver-92bfv" Jul 15 11:32:44.923412 kubelet[1944]: E0715 11:32:44.923379 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:44.923412 kubelet[1944]: W0715 11:32:44.923403 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:44.923620 kubelet[1944]: E0715 11:32:44.923424 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:44.934638 kubelet[1944]: E0715 11:32:44.934607 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:44.934638 kubelet[1944]: W0715 11:32:44.934630 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:44.934812 kubelet[1944]: E0715 11:32:44.934655 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:44.950261 kubelet[1944]: E0715 11:32:44.950237 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:44.950843 env[1206]: time="2025-07-15T11:32:44.950783677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6cfcf79796-84dwh,Uid:bfdcaa31-6294-4d91-a963-1c9b2505fc97,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:45.021678 kubelet[1944]: E0715 11:32:45.021610 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.021678 kubelet[1944]: W0715 11:32:45.021649 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.021678 kubelet[1944]: E0715 11:32:45.021679 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.022327 kubelet[1944]: E0715 11:32:45.021954 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.022327 kubelet[1944]: W0715 11:32:45.021966 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.022327 kubelet[1944]: E0715 11:32:45.021982 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.022327 kubelet[1944]: E0715 11:32:45.022207 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.022327 kubelet[1944]: W0715 11:32:45.022217 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.022327 kubelet[1944]: E0715 11:32:45.022234 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.022513 kubelet[1944]: E0715 11:32:45.022425 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.022513 kubelet[1944]: W0715 11:32:45.022436 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.022513 kubelet[1944]: E0715 11:32:45.022450 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.022675 kubelet[1944]: E0715 11:32:45.022659 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.022675 kubelet[1944]: W0715 11:32:45.022671 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.022751 kubelet[1944]: E0715 11:32:45.022698 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.022995 kubelet[1944]: E0715 11:32:45.022950 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.022995 kubelet[1944]: W0715 11:32:45.022977 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.023173 kubelet[1944]: E0715 11:32:45.023012 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.023337 kubelet[1944]: E0715 11:32:45.023322 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.023403 kubelet[1944]: W0715 11:32:45.023337 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.023451 kubelet[1944]: E0715 11:32:45.023410 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.023551 kubelet[1944]: E0715 11:32:45.023538 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.023628 kubelet[1944]: W0715 11:32:45.023551 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.023628 kubelet[1944]: E0715 11:32:45.023583 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.023774 kubelet[1944]: E0715 11:32:45.023753 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.023774 kubelet[1944]: W0715 11:32:45.023770 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.023930 kubelet[1944]: E0715 11:32:45.023805 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.024026 kubelet[1944]: E0715 11:32:45.024004 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.024026 kubelet[1944]: W0715 11:32:45.024022 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.024128 kubelet[1944]: E0715 11:32:45.024057 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.024226 kubelet[1944]: E0715 11:32:45.024209 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.024291 kubelet[1944]: W0715 11:32:45.024240 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.024291 kubelet[1944]: E0715 11:32:45.024267 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.024420 kubelet[1944]: E0715 11:32:45.024406 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.024420 kubelet[1944]: W0715 11:32:45.024415 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.024484 kubelet[1944]: E0715 11:32:45.024429 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.024696 kubelet[1944]: E0715 11:32:45.024677 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.024696 kubelet[1944]: W0715 11:32:45.024691 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.024774 kubelet[1944]: E0715 11:32:45.024707 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.024895 kubelet[1944]: E0715 11:32:45.024877 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.024895 kubelet[1944]: W0715 11:32:45.024889 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.024996 kubelet[1944]: E0715 11:32:45.024904 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.025134 kubelet[1944]: E0715 11:32:45.025109 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.025134 kubelet[1944]: W0715 11:32:45.025121 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.025346 kubelet[1944]: E0715 11:32:45.025150 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.025346 kubelet[1944]: E0715 11:32:45.025318 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.025346 kubelet[1944]: W0715 11:32:45.025335 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.025453 kubelet[1944]: E0715 11:32:45.025380 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.025595 kubelet[1944]: E0715 11:32:45.025559 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.025595 kubelet[1944]: W0715 11:32:45.025573 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.025685 kubelet[1944]: E0715 11:32:45.025604 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.025772 kubelet[1944]: E0715 11:32:45.025753 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.025772 kubelet[1944]: W0715 11:32:45.025763 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.025899 kubelet[1944]: E0715 11:32:45.025790 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.026000 kubelet[1944]: E0715 11:32:45.025982 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.026000 kubelet[1944]: W0715 11:32:45.025993 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.026110 kubelet[1944]: E0715 11:32:45.026035 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.026190 kubelet[1944]: E0715 11:32:45.026172 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.026190 kubelet[1944]: W0715 11:32:45.026185 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.026295 kubelet[1944]: E0715 11:32:45.026202 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.026401 kubelet[1944]: E0715 11:32:45.026383 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.026401 kubelet[1944]: W0715 11:32:45.026396 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.026401 kubelet[1944]: E0715 11:32:45.026412 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.026703 kubelet[1944]: E0715 11:32:45.026687 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.026703 kubelet[1944]: W0715 11:32:45.026700 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.026769 kubelet[1944]: E0715 11:32:45.026728 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.027057 kubelet[1944]: E0715 11:32:45.027027 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.027057 kubelet[1944]: W0715 11:32:45.027044 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.027169 kubelet[1944]: E0715 11:32:45.027059 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.027287 kubelet[1944]: E0715 11:32:45.027270 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.027287 kubelet[1944]: W0715 11:32:45.027281 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.027376 kubelet[1944]: E0715 11:32:45.027304 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.027545 env[1206]: time="2025-07-15T11:32:45.027489184Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-6rw4f,Uid:f664e537-f396-49ed-88f2-1f74266ef368,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:45.027615 kubelet[1944]: E0715 11:32:45.027560 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.027615 kubelet[1944]: W0715 11:32:45.027570 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.027615 kubelet[1944]: E0715 11:32:45.027581 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.072719 kubelet[1944]: E0715 11:32:45.072683 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:45.072719 kubelet[1944]: W0715 11:32:45.072707 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:45.072719 kubelet[1944]: E0715 11:32:45.072724 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:45.425278 env[1206]: time="2025-07-15T11:32:45.425181989Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:45.425278 env[1206]: time="2025-07-15T11:32:45.425228907Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:45.425278 env[1206]: time="2025-07-15T11:32:45.425239147Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:45.425716 env[1206]: time="2025-07-15T11:32:45.425649191Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/59d706ab5e984196b9c5a6dff1adc0560134bcddb6dd80f470bbfd482898567e pid=2403 runtime=io.containerd.runc.v2 Jul 15 11:32:45.435937 systemd[1]: Started cri-containerd-59d706ab5e984196b9c5a6dff1adc0560134bcddb6dd80f470bbfd482898567e.scope. Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit: BPF prog-id=115 op=LOAD Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2403 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539643730366162356539383431393662396335613664666631616463 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2403 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539643730366162356539383431393662396335613664666631616463 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.443000 audit: BPF prog-id=116 op=LOAD Jul 15 11:32:45.443000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001dba20 items=0 ppid=2403 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539643730366162356539383431393662396335613664666631616463 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit: BPF prog-id=117 op=LOAD Jul 15 11:32:45.444000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001dba68 items=0 ppid=2403 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539643730366162356539383431393662396335613664666631616463 Jul 15 11:32:45.444000 audit: BPF prog-id=117 op=UNLOAD Jul 15 11:32:45.444000 audit: BPF prog-id=116 op=UNLOAD Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.444000 audit: BPF prog-id=118 op=LOAD Jul 15 11:32:45.444000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001dbe78 items=0 ppid=2403 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539643730366162356539383431393662396335613664666631616463 Jul 15 11:32:45.467291 env[1206]: time="2025-07-15T11:32:45.467202755Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:45.467291 env[1206]: time="2025-07-15T11:32:45.467282436Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:45.467505 env[1206]: time="2025-07-15T11:32:45.467305760Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:45.467667 env[1206]: time="2025-07-15T11:32:45.467581621Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bcdee65f50aa02e3adc277dfcced3a895f2f2a4bf6f9f25d7253651e323d2311 pid=2438 runtime=io.containerd.runc.v2 Jul 15 11:32:45.481807 systemd[1]: Started cri-containerd-bcdee65f50aa02e3adc277dfcced3a895f2f2a4bf6f9f25d7253651e323d2311.scope. Jul 15 11:32:45.484799 env[1206]: time="2025-07-15T11:32:45.484767198Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6cfcf79796-84dwh,Uid:bfdcaa31-6294-4d91-a963-1c9b2505fc97,Namespace:calico-system,Attempt:0,} returns sandbox id \"59d706ab5e984196b9c5a6dff1adc0560134bcddb6dd80f470bbfd482898567e\"" Jul 15 11:32:45.485905 kubelet[1944]: E0715 11:32:45.485490 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:45.486454 env[1206]: time="2025-07-15T11:32:45.486435257Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.493000 audit: BPF prog-id=119 op=LOAD Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2438 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263646565363566353061613032653361646332373764666363656433 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2438 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263646565363566353061613032653361646332373764666363656433 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit: BPF prog-id=120 op=LOAD Jul 15 11:32:45.494000 audit[2448]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001855c0 items=0 ppid=2438 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263646565363566353061613032653361646332373764666363656433 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit: BPF prog-id=121 op=LOAD Jul 15 11:32:45.494000 audit[2448]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000185608 items=0 ppid=2438 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263646565363566353061613032653361646332373764666363656433 Jul 15 11:32:45.494000 audit: BPF prog-id=121 op=UNLOAD Jul 15 11:32:45.494000 audit: BPF prog-id=120 op=UNLOAD Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:45.494000 audit: BPF prog-id=122 op=LOAD Jul 15 11:32:45.494000 audit[2448]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000185a18 items=0 ppid=2438 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263646565363566353061613032653361646332373764666363656433 Jul 15 11:32:45.508982 env[1206]: time="2025-07-15T11:32:45.508922794Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-6rw4f,Uid:f664e537-f396-49ed-88f2-1f74266ef368,Namespace:calico-system,Attempt:0,} returns sandbox id \"bcdee65f50aa02e3adc277dfcced3a895f2f2a4bf6f9f25d7253651e323d2311\"" Jul 15 11:32:45.653000 audit[2478]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:45.653000 audit[2478]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd9882b3c0 a2=0 a3=7ffd9882b3ac items=0 ppid=2094 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.653000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:45.660000 audit[2478]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:45.660000 audit[2478]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd9882b3c0 a2=0 a3=0 items=0 ppid=2094 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:45.660000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:46.709112 kubelet[1944]: E0715 11:32:46.708630 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:32:47.296244 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1952375096.mount: Deactivated successfully. Jul 15 11:32:48.182650 env[1206]: time="2025-07-15T11:32:48.182599997Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:48.184964 env[1206]: time="2025-07-15T11:32:48.184912959Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:48.188807 env[1206]: time="2025-07-15T11:32:48.188769051Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:48.190319 env[1206]: time="2025-07-15T11:32:48.190276063Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:48.190750 env[1206]: time="2025-07-15T11:32:48.190710702Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 15 11:32:48.192067 env[1206]: time="2025-07-15T11:32:48.192038626Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:32:48.203451 env[1206]: time="2025-07-15T11:32:48.203400031Z" level=info msg="CreateContainer within sandbox \"59d706ab5e984196b9c5a6dff1adc0560134bcddb6dd80f470bbfd482898567e\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:32:48.214224 env[1206]: time="2025-07-15T11:32:48.214188524Z" level=info msg="CreateContainer within sandbox \"59d706ab5e984196b9c5a6dff1adc0560134bcddb6dd80f470bbfd482898567e\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"9d39f8513ef37bbb27909445a9541e1804635756b88729b7950801f8fe689a73\"" Jul 15 11:32:48.214685 env[1206]: time="2025-07-15T11:32:48.214662457Z" level=info msg="StartContainer for \"9d39f8513ef37bbb27909445a9541e1804635756b88729b7950801f8fe689a73\"" Jul 15 11:32:48.229010 systemd[1]: Started cri-containerd-9d39f8513ef37bbb27909445a9541e1804635756b88729b7950801f8fe689a73.scope. Jul 15 11:32:48.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.242991 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 15 11:32:48.243050 kernel: audit: type=1400 audit(1752579168.240:955): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.249210 kernel: audit: type=1400 audit(1752579168.240:956): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.249266 kernel: audit: type=1400 audit(1752579168.240:957): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.255263 kernel: audit: type=1400 audit(1752579168.240:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.258370 kernel: audit: type=1400 audit(1752579168.240:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.261613 kernel: audit: type=1400 audit(1752579168.240:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.264950 kernel: audit: type=1400 audit(1752579168.240:961): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.265185 kernel: audit: type=1400 audit(1752579168.240:962): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.268018 kernel: audit: type=1400 audit(1752579168.240:963): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.274013 kernel: audit: type=1400 audit(1752579168.241:964): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit: BPF prog-id=123 op=LOAD Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2403 pid=2487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:48.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333966383531336566333762626232373930393434356139353431 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2403 pid=2487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:48.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333966383531336566333762626232373930393434356139353431 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.245000 audit: BPF prog-id=124 op=LOAD Jul 15 11:32:48.245000 audit[2487]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003dcaf0 items=0 ppid=2403 pid=2487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:48.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333966383531336566333762626232373930393434356139353431 Jul 15 11:32:48.248000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.248000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.248000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.248000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.248000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.248000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.248000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.248000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.248000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.248000 audit: BPF prog-id=125 op=LOAD Jul 15 11:32:48.248000 audit[2487]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003dcb38 items=0 ppid=2403 pid=2487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:48.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333966383531336566333762626232373930393434356139353431 Jul 15 11:32:48.257000 audit: BPF prog-id=125 op=UNLOAD Jul 15 11:32:48.257000 audit: BPF prog-id=124 op=UNLOAD Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { perfmon } for pid=2487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit[2487]: AVC avc: denied { bpf } for pid=2487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:48.257000 audit: BPF prog-id=126 op=LOAD Jul 15 11:32:48.257000 audit[2487]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003dcf48 items=0 ppid=2403 pid=2487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:48.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333966383531336566333762626232373930393434356139353431 Jul 15 11:32:48.301750 env[1206]: time="2025-07-15T11:32:48.301703358Z" level=info msg="StartContainer for \"9d39f8513ef37bbb27909445a9541e1804635756b88729b7950801f8fe689a73\" returns successfully" Jul 15 11:32:48.707377 kubelet[1944]: E0715 11:32:48.707317 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:32:48.754594 kubelet[1944]: E0715 11:32:48.754560 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:48.841752 kubelet[1944]: E0715 11:32:48.841711 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.841752 kubelet[1944]: W0715 11:32:48.841732 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.841752 kubelet[1944]: E0715 11:32:48.841751 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.841988 kubelet[1944]: E0715 11:32:48.841968 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.841988 kubelet[1944]: W0715 11:32:48.841978 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.841988 kubelet[1944]: E0715 11:32:48.841986 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.842167 kubelet[1944]: E0715 11:32:48.842152 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.842167 kubelet[1944]: W0715 11:32:48.842161 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.842167 kubelet[1944]: E0715 11:32:48.842168 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.842363 kubelet[1944]: E0715 11:32:48.842338 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.842363 kubelet[1944]: W0715 11:32:48.842350 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.842363 kubelet[1944]: E0715 11:32:48.842359 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.842555 kubelet[1944]: E0715 11:32:48.842535 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.842555 kubelet[1944]: W0715 11:32:48.842545 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.842555 kubelet[1944]: E0715 11:32:48.842552 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.842707 kubelet[1944]: E0715 11:32:48.842696 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.842707 kubelet[1944]: W0715 11:32:48.842704 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.842758 kubelet[1944]: E0715 11:32:48.842711 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.842884 kubelet[1944]: E0715 11:32:48.842873 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.842884 kubelet[1944]: W0715 11:32:48.842882 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.842937 kubelet[1944]: E0715 11:32:48.842888 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.843071 kubelet[1944]: E0715 11:32:48.843051 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.843071 kubelet[1944]: W0715 11:32:48.843062 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.843071 kubelet[1944]: E0715 11:32:48.843069 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.843242 kubelet[1944]: E0715 11:32:48.843226 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.843242 kubelet[1944]: W0715 11:32:48.843237 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.843242 kubelet[1944]: E0715 11:32:48.843243 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.843407 kubelet[1944]: E0715 11:32:48.843394 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.843407 kubelet[1944]: W0715 11:32:48.843403 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.843470 kubelet[1944]: E0715 11:32:48.843410 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.843554 kubelet[1944]: E0715 11:32:48.843543 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.843554 kubelet[1944]: W0715 11:32:48.843552 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.843605 kubelet[1944]: E0715 11:32:48.843559 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.843695 kubelet[1944]: E0715 11:32:48.843684 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.843695 kubelet[1944]: W0715 11:32:48.843693 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.843745 kubelet[1944]: E0715 11:32:48.843700 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.843856 kubelet[1944]: E0715 11:32:48.843845 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.843856 kubelet[1944]: W0715 11:32:48.843853 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.843908 kubelet[1944]: E0715 11:32:48.843860 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.843998 kubelet[1944]: E0715 11:32:48.843983 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.843998 kubelet[1944]: W0715 11:32:48.843992 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.843998 kubelet[1944]: E0715 11:32:48.843998 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.844128 kubelet[1944]: E0715 11:32:48.844115 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.844128 kubelet[1944]: W0715 11:32:48.844125 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.844174 kubelet[1944]: E0715 11:32:48.844131 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.849536 kubelet[1944]: E0715 11:32:48.849500 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.849536 kubelet[1944]: W0715 11:32:48.849521 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.849614 kubelet[1944]: E0715 11:32:48.849539 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.849715 kubelet[1944]: E0715 11:32:48.849699 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.849715 kubelet[1944]: W0715 11:32:48.849708 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.849785 kubelet[1944]: E0715 11:32:48.849720 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.849910 kubelet[1944]: E0715 11:32:48.849888 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.849910 kubelet[1944]: W0715 11:32:48.849900 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.849974 kubelet[1944]: E0715 11:32:48.849912 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.850166 kubelet[1944]: E0715 11:32:48.850141 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.850166 kubelet[1944]: W0715 11:32:48.850160 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.850217 kubelet[1944]: E0715 11:32:48.850177 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.850391 kubelet[1944]: E0715 11:32:48.850373 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.850391 kubelet[1944]: W0715 11:32:48.850385 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.850476 kubelet[1944]: E0715 11:32:48.850401 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.850590 kubelet[1944]: E0715 11:32:48.850574 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.850590 kubelet[1944]: W0715 11:32:48.850586 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.850659 kubelet[1944]: E0715 11:32:48.850600 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.850769 kubelet[1944]: E0715 11:32:48.850755 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.850769 kubelet[1944]: W0715 11:32:48.850766 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.850860 kubelet[1944]: E0715 11:32:48.850782 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.850998 kubelet[1944]: E0715 11:32:48.850982 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.850998 kubelet[1944]: W0715 11:32:48.850993 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.851068 kubelet[1944]: E0715 11:32:48.851018 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.851151 kubelet[1944]: E0715 11:32:48.851134 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.851151 kubelet[1944]: W0715 11:32:48.851146 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.851221 kubelet[1944]: E0715 11:32:48.851167 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.851292 kubelet[1944]: E0715 11:32:48.851277 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.851292 kubelet[1944]: W0715 11:32:48.851289 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.851344 kubelet[1944]: E0715 11:32:48.851299 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.851469 kubelet[1944]: E0715 11:32:48.851446 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.851469 kubelet[1944]: W0715 11:32:48.851466 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.851551 kubelet[1944]: E0715 11:32:48.851478 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.851655 kubelet[1944]: E0715 11:32:48.851643 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.851655 kubelet[1944]: W0715 11:32:48.851652 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.851702 kubelet[1944]: E0715 11:32:48.851663 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.851838 kubelet[1944]: E0715 11:32:48.851808 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.851838 kubelet[1944]: W0715 11:32:48.851817 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.851892 kubelet[1944]: E0715 11:32:48.851840 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.852001 kubelet[1944]: E0715 11:32:48.851983 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.852001 kubelet[1944]: W0715 11:32:48.851996 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.852070 kubelet[1944]: E0715 11:32:48.852010 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.852232 kubelet[1944]: E0715 11:32:48.852206 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.852232 kubelet[1944]: W0715 11:32:48.852223 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.852411 kubelet[1944]: E0715 11:32:48.852249 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.852494 kubelet[1944]: E0715 11:32:48.852477 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.852494 kubelet[1944]: W0715 11:32:48.852490 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.852546 kubelet[1944]: E0715 11:32:48.852505 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.852738 kubelet[1944]: E0715 11:32:48.852726 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.852738 kubelet[1944]: W0715 11:32:48.852736 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.852792 kubelet[1944]: E0715 11:32:48.852749 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:48.852945 kubelet[1944]: E0715 11:32:48.852932 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:48.852945 kubelet[1944]: W0715 11:32:48.852941 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:48.853101 kubelet[1944]: E0715 11:32:48.852949 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.229019 kubelet[1944]: I0715 11:32:49.228962 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6cfcf79796-84dwh" podStartSLOduration=2.523650689 podStartE2EDuration="5.228948523s" podCreationTimestamp="2025-07-15 11:32:44 +0000 UTC" firstStartedPulling="2025-07-15 11:32:45.486232784 +0000 UTC m=+20.860376928" lastFinishedPulling="2025-07-15 11:32:48.191530608 +0000 UTC m=+23.565674762" observedRunningTime="2025-07-15 11:32:49.228297365 +0000 UTC m=+24.602441509" watchObservedRunningTime="2025-07-15 11:32:49.228948523 +0000 UTC m=+24.603092657" Jul 15 11:32:49.755687 kubelet[1944]: I0715 11:32:49.755648 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:32:49.756072 kubelet[1944]: E0715 11:32:49.755957 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:49.850034 kubelet[1944]: E0715 11:32:49.850000 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.850034 kubelet[1944]: W0715 11:32:49.850026 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.850207 kubelet[1944]: E0715 11:32:49.850052 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.850207 kubelet[1944]: E0715 11:32:49.850179 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.850207 kubelet[1944]: W0715 11:32:49.850186 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.850207 kubelet[1944]: E0715 11:32:49.850195 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.850325 kubelet[1944]: E0715 11:32:49.850314 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.850325 kubelet[1944]: W0715 11:32:49.850323 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.850370 kubelet[1944]: E0715 11:32:49.850331 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.850470 kubelet[1944]: E0715 11:32:49.850457 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.850470 kubelet[1944]: W0715 11:32:49.850467 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.850539 kubelet[1944]: E0715 11:32:49.850477 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.850614 kubelet[1944]: E0715 11:32:49.850603 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.850638 kubelet[1944]: W0715 11:32:49.850613 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.850638 kubelet[1944]: E0715 11:32:49.850623 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.850749 kubelet[1944]: E0715 11:32:49.850740 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.850778 kubelet[1944]: W0715 11:32:49.850750 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.850778 kubelet[1944]: E0715 11:32:49.850758 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.850905 kubelet[1944]: E0715 11:32:49.850895 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.850935 kubelet[1944]: W0715 11:32:49.850905 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.850935 kubelet[1944]: E0715 11:32:49.850914 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.851048 kubelet[1944]: E0715 11:32:49.851039 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.851073 kubelet[1944]: W0715 11:32:49.851052 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.851073 kubelet[1944]: E0715 11:32:49.851061 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.851202 kubelet[1944]: E0715 11:32:49.851192 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.851226 kubelet[1944]: W0715 11:32:49.851203 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.851226 kubelet[1944]: E0715 11:32:49.851212 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.851346 kubelet[1944]: E0715 11:32:49.851336 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.851372 kubelet[1944]: W0715 11:32:49.851347 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.851372 kubelet[1944]: E0715 11:32:49.851356 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.851491 kubelet[1944]: E0715 11:32:49.851481 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.851515 kubelet[1944]: W0715 11:32:49.851491 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.851515 kubelet[1944]: E0715 11:32:49.851499 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.851629 kubelet[1944]: E0715 11:32:49.851617 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.851629 kubelet[1944]: W0715 11:32:49.851626 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.851700 kubelet[1944]: E0715 11:32:49.851634 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.851759 kubelet[1944]: E0715 11:32:49.851749 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.851759 kubelet[1944]: W0715 11:32:49.851758 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.851803 kubelet[1944]: E0715 11:32:49.851766 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.851996 kubelet[1944]: E0715 11:32:49.851984 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.852061 kubelet[1944]: W0715 11:32:49.852003 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.852061 kubelet[1944]: E0715 11:32:49.852013 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.852219 kubelet[1944]: E0715 11:32:49.852203 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.852219 kubelet[1944]: W0715 11:32:49.852214 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.852305 kubelet[1944]: E0715 11:32:49.852223 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.855239 kubelet[1944]: E0715 11:32:49.855224 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.855239 kubelet[1944]: W0715 11:32:49.855234 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.855344 kubelet[1944]: E0715 11:32:49.855243 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.855378 kubelet[1944]: E0715 11:32:49.855372 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.855412 kubelet[1944]: W0715 11:32:49.855378 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.855412 kubelet[1944]: E0715 11:32:49.855390 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.855649 kubelet[1944]: E0715 11:32:49.855618 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.855649 kubelet[1944]: W0715 11:32:49.855636 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.855719 kubelet[1944]: E0715 11:32:49.855655 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.855814 kubelet[1944]: E0715 11:32:49.855799 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.855814 kubelet[1944]: W0715 11:32:49.855809 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.855919 kubelet[1944]: E0715 11:32:49.855837 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.856002 kubelet[1944]: E0715 11:32:49.855987 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.856002 kubelet[1944]: W0715 11:32:49.855996 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.856065 kubelet[1944]: E0715 11:32:49.856018 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.856187 kubelet[1944]: E0715 11:32:49.856173 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.856187 kubelet[1944]: W0715 11:32:49.856185 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.856266 kubelet[1944]: E0715 11:32:49.856201 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.856376 kubelet[1944]: E0715 11:32:49.856360 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.856376 kubelet[1944]: W0715 11:32:49.856374 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.856459 kubelet[1944]: E0715 11:32:49.856387 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.856584 kubelet[1944]: E0715 11:32:49.856570 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.856584 kubelet[1944]: W0715 11:32:49.856579 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.856709 kubelet[1944]: E0715 11:32:49.856590 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.856768 kubelet[1944]: E0715 11:32:49.856756 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.856768 kubelet[1944]: W0715 11:32:49.856766 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.856848 kubelet[1944]: E0715 11:32:49.856779 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.856955 kubelet[1944]: E0715 11:32:49.856938 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.856955 kubelet[1944]: W0715 11:32:49.856948 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.857060 kubelet[1944]: E0715 11:32:49.856960 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.857114 kubelet[1944]: E0715 11:32:49.857102 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.857114 kubelet[1944]: W0715 11:32:49.857112 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.857173 kubelet[1944]: E0715 11:32:49.857122 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.857278 kubelet[1944]: E0715 11:32:49.857264 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.857278 kubelet[1944]: W0715 11:32:49.857275 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.857342 kubelet[1944]: E0715 11:32:49.857289 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.857473 kubelet[1944]: E0715 11:32:49.857459 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.857473 kubelet[1944]: W0715 11:32:49.857469 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.857539 kubelet[1944]: E0715 11:32:49.857481 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.857619 kubelet[1944]: E0715 11:32:49.857608 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.857652 kubelet[1944]: W0715 11:32:49.857618 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.857652 kubelet[1944]: E0715 11:32:49.857638 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.857775 kubelet[1944]: E0715 11:32:49.857764 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.857805 kubelet[1944]: W0715 11:32:49.857774 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.857805 kubelet[1944]: E0715 11:32:49.857786 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.857938 kubelet[1944]: E0715 11:32:49.857924 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.857938 kubelet[1944]: W0715 11:32:49.857932 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.858027 kubelet[1944]: E0715 11:32:49.857942 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.858197 kubelet[1944]: E0715 11:32:49.858163 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.858197 kubelet[1944]: W0715 11:32:49.858183 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.858197 kubelet[1944]: E0715 11:32:49.858195 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:49.858320 kubelet[1944]: E0715 11:32:49.858309 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:32:49.858320 kubelet[1944]: W0715 11:32:49.858318 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:32:49.858388 kubelet[1944]: E0715 11:32:49.858327 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:32:50.707549 kubelet[1944]: E0715 11:32:50.707510 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:32:50.910143 env[1206]: time="2025-07-15T11:32:50.910084037Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:50.914266 env[1206]: time="2025-07-15T11:32:50.914225340Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:50.917329 env[1206]: time="2025-07-15T11:32:50.917274156Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:50.919943 env[1206]: time="2025-07-15T11:32:50.919729873Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:50.920194 env[1206]: time="2025-07-15T11:32:50.920165915Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 15 11:32:50.922441 env[1206]: time="2025-07-15T11:32:50.922389344Z" level=info msg="CreateContainer within sandbox \"bcdee65f50aa02e3adc277dfcced3a895f2f2a4bf6f9f25d7253651e323d2311\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:32:50.944342 env[1206]: time="2025-07-15T11:32:50.944292196Z" level=info msg="CreateContainer within sandbox \"bcdee65f50aa02e3adc277dfcced3a895f2f2a4bf6f9f25d7253651e323d2311\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"5beaffcaf75053dcc7b7dd89137c26afa90a9877b09f049e5bd0ccf0e5e2296e\"" Jul 15 11:32:50.944978 env[1206]: time="2025-07-15T11:32:50.944945468Z" level=info msg="StartContainer for \"5beaffcaf75053dcc7b7dd89137c26afa90a9877b09f049e5bd0ccf0e5e2296e\"" Jul 15 11:32:50.970783 systemd[1]: Started cri-containerd-5beaffcaf75053dcc7b7dd89137c26afa90a9877b09f049e5bd0ccf0e5e2296e.scope. Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c76b0 a2=3c a3=7ff060c524d8 items=0 ppid=2438 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:50.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656166666361663735303533646363376237646438393133376332 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit: BPF prog-id=127 op=LOAD Jul 15 11:32:50.982000 audit[2595]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c79d8 a2=78 a3=c000392bd8 items=0 ppid=2438 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:50.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656166666361663735303533646363376237646438393133376332 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit: BPF prog-id=128 op=LOAD Jul 15 11:32:50.982000 audit[2595]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c7770 a2=78 a3=c000392c28 items=0 ppid=2438 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:50.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656166666361663735303533646363376237646438393133376332 Jul 15 11:32:50.982000 audit: BPF prog-id=128 op=UNLOAD Jul 15 11:32:50.982000 audit: BPF prog-id=127 op=UNLOAD Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { perfmon } for pid=2595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit[2595]: AVC avc: denied { bpf } for pid=2595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:50.982000 audit: BPF prog-id=129 op=LOAD Jul 15 11:32:50.982000 audit[2595]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c7c30 a2=78 a3=c000392cb8 items=0 ppid=2438 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:50.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656166666361663735303533646363376237646438393133376332 Jul 15 11:32:51.005462 systemd[1]: cri-containerd-5beaffcaf75053dcc7b7dd89137c26afa90a9877b09f049e5bd0ccf0e5e2296e.scope: Deactivated successfully. Jul 15 11:32:51.008000 audit: BPF prog-id=129 op=UNLOAD Jul 15 11:32:51.164507 env[1206]: time="2025-07-15T11:32:51.164452073Z" level=info msg="StartContainer for \"5beaffcaf75053dcc7b7dd89137c26afa90a9877b09f049e5bd0ccf0e5e2296e\" returns successfully" Jul 15 11:32:51.181692 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5beaffcaf75053dcc7b7dd89137c26afa90a9877b09f049e5bd0ccf0e5e2296e-rootfs.mount: Deactivated successfully. Jul 15 11:32:51.315033 env[1206]: time="2025-07-15T11:32:51.314901429Z" level=info msg="shim disconnected" id=5beaffcaf75053dcc7b7dd89137c26afa90a9877b09f049e5bd0ccf0e5e2296e Jul 15 11:32:51.315033 env[1206]: time="2025-07-15T11:32:51.314951243Z" level=warning msg="cleaning up after shim disconnected" id=5beaffcaf75053dcc7b7dd89137c26afa90a9877b09f049e5bd0ccf0e5e2296e namespace=k8s.io Jul 15 11:32:51.315033 env[1206]: time="2025-07-15T11:32:51.314964408Z" level=info msg="cleaning up dead shim" Jul 15 11:32:51.322155 env[1206]: time="2025-07-15T11:32:51.322097695Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:32:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2635 runtime=io.containerd.runc.v2\n" Jul 15 11:32:51.761304 env[1206]: time="2025-07-15T11:32:51.761254789Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:32:52.707431 kubelet[1944]: E0715 11:32:52.707354 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:32:54.708072 kubelet[1944]: E0715 11:32:54.708026 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:32:56.709599 kubelet[1944]: E0715 11:32:56.709548 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:32:56.749264 env[1206]: time="2025-07-15T11:32:56.749214277Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:56.771411 env[1206]: time="2025-07-15T11:32:56.771369957Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:56.795732 env[1206]: time="2025-07-15T11:32:56.795691301Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:56.811023 env[1206]: time="2025-07-15T11:32:56.810992646Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:56.811359 env[1206]: time="2025-07-15T11:32:56.811330291Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 15 11:32:56.814001 env[1206]: time="2025-07-15T11:32:56.813956522Z" level=info msg="CreateContainer within sandbox \"bcdee65f50aa02e3adc277dfcced3a895f2f2a4bf6f9f25d7253651e323d2311\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:32:56.847157 env[1206]: time="2025-07-15T11:32:56.847111293Z" level=info msg="CreateContainer within sandbox \"bcdee65f50aa02e3adc277dfcced3a895f2f2a4bf6f9f25d7253651e323d2311\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"dc236ab51f331ee337b5cd161cf61ec1f021ca17862f7822a3a87d6c8a2c5589\"" Jul 15 11:32:56.847697 env[1206]: time="2025-07-15T11:32:56.847636602Z" level=info msg="StartContainer for \"dc236ab51f331ee337b5cd161cf61ec1f021ca17862f7822a3a87d6c8a2c5589\"" Jul 15 11:32:56.864549 systemd[1]: Started cri-containerd-dc236ab51f331ee337b5cd161cf61ec1f021ca17862f7822a3a87d6c8a2c5589.scope. Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.892533 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 15 11:32:56.892716 kernel: audit: type=1400 audit(1752579176.890:980): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f6bf9ed26a8 items=0 ppid=2438 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:56.902249 kernel: audit: type=1300 audit(1752579176.890:980): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f6bf9ed26a8 items=0 ppid=2438 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:56.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323336616235316633333165653333376235636431363163663631 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.910421 kernel: audit: type=1327 audit(1752579176.890:980): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323336616235316633333165653333376235636431363163663631 Jul 15 11:32:56.910577 kernel: audit: type=1400 audit(1752579176.890:981): avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.910607 kernel: audit: type=1400 audit(1752579176.890:981): avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.919873 kernel: audit: type=1400 audit(1752579176.890:981): avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.919960 kernel: audit: type=1400 audit(1752579176.890:981): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.919993 kernel: audit: type=1400 audit(1752579176.890:981): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.923284 kernel: audit: type=1400 audit(1752579176.890:981): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.926320 kernel: audit: type=1400 audit(1752579176.890:981): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.890000 audit: BPF prog-id=130 op=LOAD Jul 15 11:32:56.890000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000331bd8 items=0 ppid=2438 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:56.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323336616235316633333165653333376235636431363163663631 Jul 15 11:32:56.891000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.891000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.891000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.891000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.891000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.891000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.891000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.891000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.891000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.891000 audit: BPF prog-id=131 op=LOAD Jul 15 11:32:56.891000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000331c28 items=0 ppid=2438 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:56.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323336616235316633333165653333376235636431363163663631 Jul 15 11:32:56.901000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:32:56.901000 audit: BPF prog-id=130 op=UNLOAD Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.901000 audit: BPF prog-id=132 op=LOAD Jul 15 11:32:56.901000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000331cb8 items=0 ppid=2438 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:56.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323336616235316633333165653333376235636431363163663631 Jul 15 11:32:57.989502 env[1206]: time="2025-07-15T11:32:57.989428200Z" level=info msg="StartContainer for \"dc236ab51f331ee337b5cd161cf61ec1f021ca17862f7822a3a87d6c8a2c5589\" returns successfully" Jul 15 11:32:58.707547 kubelet[1944]: E0715 11:32:58.707458 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:32:59.398083 kubelet[1944]: I0715 11:32:59.398036 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:32:59.398654 kubelet[1944]: E0715 11:32:59.398626 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:59.427000 audit[2691]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2691 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:59.427000 audit[2691]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe7353c260 a2=0 a3=7ffe7353c24c items=0 ppid=2094 pid=2691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:59.427000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:59.432000 audit[2691]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2691 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:59.432000 audit[2691]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe7353c260 a2=0 a3=7ffe7353c24c items=0 ppid=2094 pid=2691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:59.432000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:59.572137 env[1206]: time="2025-07-15T11:32:59.572078234Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:32:59.573716 systemd[1]: cri-containerd-dc236ab51f331ee337b5cd161cf61ec1f021ca17862f7822a3a87d6c8a2c5589.scope: Deactivated successfully. Jul 15 11:32:59.576000 audit: BPF prog-id=132 op=UNLOAD Jul 15 11:32:59.590630 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc236ab51f331ee337b5cd161cf61ec1f021ca17862f7822a3a87d6c8a2c5589-rootfs.mount: Deactivated successfully. Jul 15 11:32:59.600045 env[1206]: time="2025-07-15T11:32:59.599998546Z" level=info msg="shim disconnected" id=dc236ab51f331ee337b5cd161cf61ec1f021ca17862f7822a3a87d6c8a2c5589 Jul 15 11:32:59.600045 env[1206]: time="2025-07-15T11:32:59.600042499Z" level=warning msg="cleaning up after shim disconnected" id=dc236ab51f331ee337b5cd161cf61ec1f021ca17862f7822a3a87d6c8a2c5589 namespace=k8s.io Jul 15 11:32:59.600045 env[1206]: time="2025-07-15T11:32:59.600051776Z" level=info msg="cleaning up dead shim" Jul 15 11:32:59.606961 env[1206]: time="2025-07-15T11:32:59.606926110Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:32:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2706 runtime=io.containerd.runc.v2\n" Jul 15 11:32:59.608758 kubelet[1944]: I0715 11:32:59.608737 1944 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 15 11:32:59.635766 systemd[1]: Created slice kubepods-burstable-pod761df6db_bbcd_4fe9_80ab_3a95e8a52330.slice. Jul 15 11:32:59.642493 systemd[1]: Created slice kubepods-burstable-pod477d8e9e_2b8d_4dcb_ad01_f2f6efbfd3c9.slice. Jul 15 11:32:59.646993 systemd[1]: Created slice kubepods-besteffort-podcbc702ff_f005_4e72_822a_27c70a812c58.slice. Jul 15 11:32:59.651938 systemd[1]: Created slice kubepods-besteffort-podc18c836b_6a9f_4a81_8d19_0a21744e1876.slice. Jul 15 11:32:59.656890 systemd[1]: Created slice kubepods-besteffort-pod9e21e34f_bad1_42a0_ba75_c6a2aae8541a.slice. Jul 15 11:32:59.661884 systemd[1]: Created slice kubepods-besteffort-pod20d347b8_3fa2_4943_b2e1_f870534ddd7b.slice. Jul 15 11:32:59.665082 systemd[1]: Created slice kubepods-besteffort-podc09f3584_588b_4ef0_bea9_18b4680d3787.slice. Jul 15 11:32:59.800207 kubelet[1944]: I0715 11:32:59.800153 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jqbjm\" (UniqueName: \"kubernetes.io/projected/477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9-kube-api-access-jqbjm\") pod \"coredns-7c65d6cfc9-gmfkp\" (UID: \"477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9\") " pod="kube-system/coredns-7c65d6cfc9-gmfkp" Jul 15 11:32:59.800207 kubelet[1944]: I0715 11:32:59.800203 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wg9kk\" (UniqueName: \"kubernetes.io/projected/9e21e34f-bad1-42a0-ba75-c6a2aae8541a-kube-api-access-wg9kk\") pod \"calico-kube-controllers-7dbdfb9cff-bwzbt\" (UID: \"9e21e34f-bad1-42a0-ba75-c6a2aae8541a\") " pod="calico-system/calico-kube-controllers-7dbdfb9cff-bwzbt" Jul 15 11:32:59.800606 kubelet[1944]: I0715 11:32:59.800227 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/20d347b8-3fa2-4943-b2e1-f870534ddd7b-whisker-backend-key-pair\") pod \"whisker-646d4f56cf-dxmld\" (UID: \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\") " pod="calico-system/whisker-646d4f56cf-dxmld" Jul 15 11:32:59.800606 kubelet[1944]: I0715 11:32:59.800266 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4zt2q\" (UniqueName: \"kubernetes.io/projected/c09f3584-588b-4ef0-bea9-18b4680d3787-kube-api-access-4zt2q\") pod \"goldmane-58fd7646b9-4pzc9\" (UID: \"c09f3584-588b-4ef0-bea9-18b4680d3787\") " pod="calico-system/goldmane-58fd7646b9-4pzc9" Jul 15 11:32:59.800606 kubelet[1944]: I0715 11:32:59.800287 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/20d347b8-3fa2-4943-b2e1-f870534ddd7b-whisker-ca-bundle\") pod \"whisker-646d4f56cf-dxmld\" (UID: \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\") " pod="calico-system/whisker-646d4f56cf-dxmld" Jul 15 11:32:59.800606 kubelet[1944]: I0715 11:32:59.800308 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tzsw7\" (UniqueName: \"kubernetes.io/projected/20d347b8-3fa2-4943-b2e1-f870534ddd7b-kube-api-access-tzsw7\") pod \"whisker-646d4f56cf-dxmld\" (UID: \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\") " pod="calico-system/whisker-646d4f56cf-dxmld" Jul 15 11:32:59.800606 kubelet[1944]: I0715 11:32:59.800327 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5xvvz\" (UniqueName: \"kubernetes.io/projected/c18c836b-6a9f-4a81-8d19-0a21744e1876-kube-api-access-5xvvz\") pod \"calico-apiserver-6644dcb798-mhcvv\" (UID: \"c18c836b-6a9f-4a81-8d19-0a21744e1876\") " pod="calico-apiserver/calico-apiserver-6644dcb798-mhcvv" Jul 15 11:32:59.800780 kubelet[1944]: I0715 11:32:59.800348 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c09f3584-588b-4ef0-bea9-18b4680d3787-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-4pzc9\" (UID: \"c09f3584-588b-4ef0-bea9-18b4680d3787\") " pod="calico-system/goldmane-58fd7646b9-4pzc9" Jul 15 11:32:59.800780 kubelet[1944]: I0715 11:32:59.800368 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c18c836b-6a9f-4a81-8d19-0a21744e1876-calico-apiserver-certs\") pod \"calico-apiserver-6644dcb798-mhcvv\" (UID: \"c18c836b-6a9f-4a81-8d19-0a21744e1876\") " pod="calico-apiserver/calico-apiserver-6644dcb798-mhcvv" Jul 15 11:32:59.800780 kubelet[1944]: I0715 11:32:59.800389 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/c09f3584-588b-4ef0-bea9-18b4680d3787-config\") pod \"goldmane-58fd7646b9-4pzc9\" (UID: \"c09f3584-588b-4ef0-bea9-18b4680d3787\") " pod="calico-system/goldmane-58fd7646b9-4pzc9" Jul 15 11:32:59.800780 kubelet[1944]: I0715 11:32:59.800414 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9e21e34f-bad1-42a0-ba75-c6a2aae8541a-tigera-ca-bundle\") pod \"calico-kube-controllers-7dbdfb9cff-bwzbt\" (UID: \"9e21e34f-bad1-42a0-ba75-c6a2aae8541a\") " pod="calico-system/calico-kube-controllers-7dbdfb9cff-bwzbt" Jul 15 11:32:59.800780 kubelet[1944]: I0715 11:32:59.800437 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9-config-volume\") pod \"coredns-7c65d6cfc9-gmfkp\" (UID: \"477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9\") " pod="kube-system/coredns-7c65d6cfc9-gmfkp" Jul 15 11:32:59.800920 kubelet[1944]: I0715 11:32:59.800457 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/c09f3584-588b-4ef0-bea9-18b4680d3787-goldmane-key-pair\") pod \"goldmane-58fd7646b9-4pzc9\" (UID: \"c09f3584-588b-4ef0-bea9-18b4680d3787\") " pod="calico-system/goldmane-58fd7646b9-4pzc9" Jul 15 11:32:59.800920 kubelet[1944]: I0715 11:32:59.800478 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f8bzk\" (UniqueName: \"kubernetes.io/projected/761df6db-bbcd-4fe9-80ab-3a95e8a52330-kube-api-access-f8bzk\") pod \"coredns-7c65d6cfc9-rdrvp\" (UID: \"761df6db-bbcd-4fe9-80ab-3a95e8a52330\") " pod="kube-system/coredns-7c65d6cfc9-rdrvp" Jul 15 11:32:59.800920 kubelet[1944]: I0715 11:32:59.800496 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/cbc702ff-f005-4e72-822a-27c70a812c58-calico-apiserver-certs\") pod \"calico-apiserver-6644dcb798-st6rl\" (UID: \"cbc702ff-f005-4e72-822a-27c70a812c58\") " pod="calico-apiserver/calico-apiserver-6644dcb798-st6rl" Jul 15 11:32:59.800920 kubelet[1944]: I0715 11:32:59.800516 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qmgkv\" (UniqueName: \"kubernetes.io/projected/cbc702ff-f005-4e72-822a-27c70a812c58-kube-api-access-qmgkv\") pod \"calico-apiserver-6644dcb798-st6rl\" (UID: \"cbc702ff-f005-4e72-822a-27c70a812c58\") " pod="calico-apiserver/calico-apiserver-6644dcb798-st6rl" Jul 15 11:32:59.800920 kubelet[1944]: I0715 11:32:59.800537 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/761df6db-bbcd-4fe9-80ab-3a95e8a52330-config-volume\") pod \"coredns-7c65d6cfc9-rdrvp\" (UID: \"761df6db-bbcd-4fe9-80ab-3a95e8a52330\") " pod="kube-system/coredns-7c65d6cfc9-rdrvp" Jul 15 11:32:59.939376 kubelet[1944]: E0715 11:32:59.939282 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:59.941330 env[1206]: time="2025-07-15T11:32:59.941273656Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-rdrvp,Uid:761df6db-bbcd-4fe9-80ab-3a95e8a52330,Namespace:kube-system,Attempt:0,}" Jul 15 11:32:59.945895 kubelet[1944]: E0715 11:32:59.945803 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:59.946280 env[1206]: time="2025-07-15T11:32:59.946247116Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gmfkp,Uid:477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9,Namespace:kube-system,Attempt:0,}" Jul 15 11:32:59.949797 env[1206]: time="2025-07-15T11:32:59.949761533Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6644dcb798-st6rl,Uid:cbc702ff-f005-4e72-822a-27c70a812c58,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:32:59.955254 env[1206]: time="2025-07-15T11:32:59.955202923Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6644dcb798-mhcvv,Uid:c18c836b-6a9f-4a81-8d19-0a21744e1876,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:32:59.960704 env[1206]: time="2025-07-15T11:32:59.960678307Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7dbdfb9cff-bwzbt,Uid:9e21e34f-bad1-42a0-ba75-c6a2aae8541a,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:59.964167 env[1206]: time="2025-07-15T11:32:59.964141619Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-646d4f56cf-dxmld,Uid:20d347b8-3fa2-4943-b2e1-f870534ddd7b,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:59.967719 env[1206]: time="2025-07-15T11:32:59.967692935Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-4pzc9,Uid:c09f3584-588b-4ef0-bea9-18b4680d3787,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:59.996536 kubelet[1944]: E0715 11:32:59.996507 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:59.996998 env[1206]: time="2025-07-15T11:32:59.996970419Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:33:00.352932 env[1206]: time="2025-07-15T11:33:00.352793671Z" level=error msg="Failed to destroy network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.358140 env[1206]: time="2025-07-15T11:33:00.358086830Z" level=error msg="encountered an error cleaning up failed sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.358330 env[1206]: time="2025-07-15T11:33:00.358299901Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gmfkp,Uid:477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.359040 kubelet[1944]: E0715 11:33:00.358610 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.359040 kubelet[1944]: E0715 11:33:00.358699 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-gmfkp" Jul 15 11:33:00.359040 kubelet[1944]: E0715 11:33:00.358732 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-gmfkp" Jul 15 11:33:00.359182 kubelet[1944]: E0715 11:33:00.358774 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-gmfkp_kube-system(477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-gmfkp_kube-system(477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-gmfkp" podUID="477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9" Jul 15 11:33:00.362266 env[1206]: time="2025-07-15T11:33:00.362194953Z" level=error msg="Failed to destroy network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.362598 env[1206]: time="2025-07-15T11:33:00.362557875Z" level=error msg="encountered an error cleaning up failed sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.362722 env[1206]: time="2025-07-15T11:33:00.362692628Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7dbdfb9cff-bwzbt,Uid:9e21e34f-bad1-42a0-ba75-c6a2aae8541a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.363071 kubelet[1944]: E0715 11:33:00.363039 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.363155 kubelet[1944]: E0715 11:33:00.363112 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7dbdfb9cff-bwzbt" Jul 15 11:33:00.363155 kubelet[1944]: E0715 11:33:00.363133 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7dbdfb9cff-bwzbt" Jul 15 11:33:00.363233 kubelet[1944]: E0715 11:33:00.363179 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7dbdfb9cff-bwzbt_calico-system(9e21e34f-bad1-42a0-ba75-c6a2aae8541a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7dbdfb9cff-bwzbt_calico-system(9e21e34f-bad1-42a0-ba75-c6a2aae8541a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7dbdfb9cff-bwzbt" podUID="9e21e34f-bad1-42a0-ba75-c6a2aae8541a" Jul 15 11:33:00.391782 env[1206]: time="2025-07-15T11:33:00.391706937Z" level=error msg="Failed to destroy network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.392134 env[1206]: time="2025-07-15T11:33:00.392101929Z" level=error msg="encountered an error cleaning up failed sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.392198 env[1206]: time="2025-07-15T11:33:00.392153686Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-4pzc9,Uid:c09f3584-588b-4ef0-bea9-18b4680d3787,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.392439 kubelet[1944]: E0715 11:33:00.392395 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.392507 kubelet[1944]: E0715 11:33:00.392462 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-4pzc9" Jul 15 11:33:00.392507 kubelet[1944]: E0715 11:33:00.392487 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-4pzc9" Jul 15 11:33:00.392565 kubelet[1944]: E0715 11:33:00.392541 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-4pzc9_calico-system(c09f3584-588b-4ef0-bea9-18b4680d3787)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-4pzc9_calico-system(c09f3584-588b-4ef0-bea9-18b4680d3787)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-4pzc9" podUID="c09f3584-588b-4ef0-bea9-18b4680d3787" Jul 15 11:33:00.392744 env[1206]: time="2025-07-15T11:33:00.392687951Z" level=error msg="Failed to destroy network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.393240 env[1206]: time="2025-07-15T11:33:00.393177682Z" level=error msg="encountered an error cleaning up failed sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.393410 env[1206]: time="2025-07-15T11:33:00.393381605Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6644dcb798-mhcvv,Uid:c18c836b-6a9f-4a81-8d19-0a21744e1876,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.393789 kubelet[1944]: E0715 11:33:00.393734 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.393875 kubelet[1944]: E0715 11:33:00.393805 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6644dcb798-mhcvv" Jul 15 11:33:00.393875 kubelet[1944]: E0715 11:33:00.393838 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6644dcb798-mhcvv" Jul 15 11:33:00.393994 kubelet[1944]: E0715 11:33:00.393879 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6644dcb798-mhcvv_calico-apiserver(c18c836b-6a9f-4a81-8d19-0a21744e1876)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6644dcb798-mhcvv_calico-apiserver(c18c836b-6a9f-4a81-8d19-0a21744e1876)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6644dcb798-mhcvv" podUID="c18c836b-6a9f-4a81-8d19-0a21744e1876" Jul 15 11:33:00.394273 env[1206]: time="2025-07-15T11:33:00.394238365Z" level=error msg="Failed to destroy network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.394508 env[1206]: time="2025-07-15T11:33:00.394458830Z" level=error msg="Failed to destroy network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.394987 env[1206]: time="2025-07-15T11:33:00.394952588Z" level=error msg="encountered an error cleaning up failed sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.395079 env[1206]: time="2025-07-15T11:33:00.394996410Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-rdrvp,Uid:761df6db-bbcd-4fe9-80ab-3a95e8a52330,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.395160 kubelet[1944]: E0715 11:33:00.395089 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.395160 kubelet[1944]: E0715 11:33:00.395113 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-rdrvp" Jul 15 11:33:00.395160 kubelet[1944]: E0715 11:33:00.395126 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-rdrvp" Jul 15 11:33:00.395410 kubelet[1944]: E0715 11:33:00.395149 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-rdrvp_kube-system(761df6db-bbcd-4fe9-80ab-3a95e8a52330)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-rdrvp_kube-system(761df6db-bbcd-4fe9-80ab-3a95e8a52330)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-rdrvp" podUID="761df6db-bbcd-4fe9-80ab-3a95e8a52330" Jul 15 11:33:00.396419 env[1206]: time="2025-07-15T11:33:00.396385762Z" level=error msg="encountered an error cleaning up failed sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.396474 env[1206]: time="2025-07-15T11:33:00.396435555Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-646d4f56cf-dxmld,Uid:20d347b8-3fa2-4943-b2e1-f870534ddd7b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.396750 kubelet[1944]: E0715 11:33:00.396640 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.396750 kubelet[1944]: E0715 11:33:00.396672 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-646d4f56cf-dxmld" Jul 15 11:33:00.396750 kubelet[1944]: E0715 11:33:00.396687 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-646d4f56cf-dxmld" Jul 15 11:33:00.396925 kubelet[1944]: E0715 11:33:00.396721 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-646d4f56cf-dxmld_calico-system(20d347b8-3fa2-4943-b2e1-f870534ddd7b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-646d4f56cf-dxmld_calico-system(20d347b8-3fa2-4943-b2e1-f870534ddd7b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-646d4f56cf-dxmld" podUID="20d347b8-3fa2-4943-b2e1-f870534ddd7b" Jul 15 11:33:00.400289 env[1206]: time="2025-07-15T11:33:00.400239977Z" level=error msg="Failed to destroy network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.400588 env[1206]: time="2025-07-15T11:33:00.400539830Z" level=error msg="encountered an error cleaning up failed sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.400640 env[1206]: time="2025-07-15T11:33:00.400605764Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6644dcb798-st6rl,Uid:cbc702ff-f005-4e72-822a-27c70a812c58,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.400868 kubelet[1944]: E0715 11:33:00.400782 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.400868 kubelet[1944]: E0715 11:33:00.400863 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6644dcb798-st6rl" Jul 15 11:33:00.400948 kubelet[1944]: E0715 11:33:00.400886 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6644dcb798-st6rl" Jul 15 11:33:00.400948 kubelet[1944]: E0715 11:33:00.400935 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6644dcb798-st6rl_calico-apiserver(cbc702ff-f005-4e72-822a-27c70a812c58)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6644dcb798-st6rl_calico-apiserver(cbc702ff-f005-4e72-822a-27c70a812c58)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6644dcb798-st6rl" podUID="cbc702ff-f005-4e72-822a-27c70a812c58" Jul 15 11:33:00.711729 systemd[1]: Created slice kubepods-besteffort-podf4300a85_d6b1_4be7_b787_3060531fee25.slice. Jul 15 11:33:00.713467 env[1206]: time="2025-07-15T11:33:00.713432483Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-92bfv,Uid:f4300a85-d6b1-4be7-b787-3060531fee25,Namespace:calico-system,Attempt:0,}" Jul 15 11:33:00.760487 env[1206]: time="2025-07-15T11:33:00.760420268Z" level=error msg="Failed to destroy network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.760740 env[1206]: time="2025-07-15T11:33:00.760708339Z" level=error msg="encountered an error cleaning up failed sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.760795 env[1206]: time="2025-07-15T11:33:00.760749346Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-92bfv,Uid:f4300a85-d6b1-4be7-b787-3060531fee25,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.760985 kubelet[1944]: E0715 11:33:00.760942 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:00.761051 kubelet[1944]: E0715 11:33:00.761007 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-92bfv" Jul 15 11:33:00.761051 kubelet[1944]: E0715 11:33:00.761027 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-92bfv" Jul 15 11:33:00.761099 kubelet[1944]: E0715 11:33:00.761067 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-92bfv_calico-system(f4300a85-d6b1-4be7-b787-3060531fee25)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-92bfv_calico-system(f4300a85-d6b1-4be7-b787-3060531fee25)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:33:00.762521 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7-shm.mount: Deactivated successfully. Jul 15 11:33:00.999042 kubelet[1944]: I0715 11:33:00.998926 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:00.999650 env[1206]: time="2025-07-15T11:33:00.999556157Z" level=info msg="StopPodSandbox for \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\"" Jul 15 11:33:01.000119 kubelet[1944]: I0715 11:33:01.000094 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:01.000447 env[1206]: time="2025-07-15T11:33:01.000416835Z" level=info msg="StopPodSandbox for \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\"" Jul 15 11:33:01.001026 kubelet[1944]: I0715 11:33:01.000991 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:01.001498 env[1206]: time="2025-07-15T11:33:01.001470847Z" level=info msg="StopPodSandbox for \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\"" Jul 15 11:33:01.002068 kubelet[1944]: I0715 11:33:01.002037 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:01.002599 env[1206]: time="2025-07-15T11:33:01.002569571Z" level=info msg="StopPodSandbox for \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\"" Jul 15 11:33:01.004545 kubelet[1944]: I0715 11:33:01.004241 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:01.005485 env[1206]: time="2025-07-15T11:33:01.005452430Z" level=info msg="StopPodSandbox for \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\"" Jul 15 11:33:01.007085 kubelet[1944]: I0715 11:33:01.007057 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:01.007493 env[1206]: time="2025-07-15T11:33:01.007442439Z" level=info msg="StopPodSandbox for \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\"" Jul 15 11:33:01.009953 kubelet[1944]: I0715 11:33:01.009925 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:01.010422 env[1206]: time="2025-07-15T11:33:01.010393265Z" level=info msg="StopPodSandbox for \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\"" Jul 15 11:33:01.014535 kubelet[1944]: I0715 11:33:01.014070 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:01.014939 env[1206]: time="2025-07-15T11:33:01.014910806Z" level=info msg="StopPodSandbox for \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\"" Jul 15 11:33:01.042945 env[1206]: time="2025-07-15T11:33:01.042890992Z" level=error msg="StopPodSandbox for \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\" failed" error="failed to destroy network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:01.046865 kubelet[1944]: E0715 11:33:01.043281 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:01.046865 kubelet[1944]: E0715 11:33:01.043352 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7"} Jul 15 11:33:01.046865 kubelet[1944]: E0715 11:33:01.043414 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f4300a85-d6b1-4be7-b787-3060531fee25\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:01.046865 kubelet[1944]: E0715 11:33:01.043434 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f4300a85-d6b1-4be7-b787-3060531fee25\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-92bfv" podUID="f4300a85-d6b1-4be7-b787-3060531fee25" Jul 15 11:33:01.064314 env[1206]: time="2025-07-15T11:33:01.064258150Z" level=error msg="StopPodSandbox for \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\" failed" error="failed to destroy network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:01.064804 kubelet[1944]: E0715 11:33:01.064657 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:01.064804 kubelet[1944]: E0715 11:33:01.064710 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40"} Jul 15 11:33:01.064804 kubelet[1944]: E0715 11:33:01.064742 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9e21e34f-bad1-42a0-ba75-c6a2aae8541a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:01.064804 kubelet[1944]: E0715 11:33:01.064763 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9e21e34f-bad1-42a0-ba75-c6a2aae8541a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7dbdfb9cff-bwzbt" podUID="9e21e34f-bad1-42a0-ba75-c6a2aae8541a" Jul 15 11:33:01.083839 env[1206]: time="2025-07-15T11:33:01.083768267Z" level=error msg="StopPodSandbox for \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\" failed" error="failed to destroy network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:01.084243 kubelet[1944]: E0715 11:33:01.084189 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:01.084309 kubelet[1944]: E0715 11:33:01.084256 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2"} Jul 15 11:33:01.084309 kubelet[1944]: E0715 11:33:01.084288 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cbc702ff-f005-4e72-822a-27c70a812c58\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:01.084398 kubelet[1944]: E0715 11:33:01.084308 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cbc702ff-f005-4e72-822a-27c70a812c58\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6644dcb798-st6rl" podUID="cbc702ff-f005-4e72-822a-27c70a812c58" Jul 15 11:33:01.099192 env[1206]: time="2025-07-15T11:33:01.099124147Z" level=error msg="StopPodSandbox for \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\" failed" error="failed to destroy network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:01.099848 kubelet[1944]: E0715 11:33:01.099652 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:01.099848 kubelet[1944]: E0715 11:33:01.099721 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c"} Jul 15 11:33:01.099848 kubelet[1944]: E0715 11:33:01.099765 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c18c836b-6a9f-4a81-8d19-0a21744e1876\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:01.099848 kubelet[1944]: E0715 11:33:01.099792 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c18c836b-6a9f-4a81-8d19-0a21744e1876\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6644dcb798-mhcvv" podUID="c18c836b-6a9f-4a81-8d19-0a21744e1876" Jul 15 11:33:01.104755 env[1206]: time="2025-07-15T11:33:01.104702671Z" level=error msg="StopPodSandbox for \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\" failed" error="failed to destroy network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:01.105156 kubelet[1944]: E0715 11:33:01.105117 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:01.105232 kubelet[1944]: E0715 11:33:01.105181 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba"} Jul 15 11:33:01.105232 kubelet[1944]: E0715 11:33:01.105219 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c09f3584-588b-4ef0-bea9-18b4680d3787\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:01.105324 kubelet[1944]: E0715 11:33:01.105251 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c09f3584-588b-4ef0-bea9-18b4680d3787\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-4pzc9" podUID="c09f3584-588b-4ef0-bea9-18b4680d3787" Jul 15 11:33:01.112018 env[1206]: time="2025-07-15T11:33:01.111970139Z" level=error msg="StopPodSandbox for \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\" failed" error="failed to destroy network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:01.112343 kubelet[1944]: E0715 11:33:01.112302 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:01.112405 kubelet[1944]: E0715 11:33:01.112344 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23"} Jul 15 11:33:01.112405 kubelet[1944]: E0715 11:33:01.112373 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:01.112405 kubelet[1944]: E0715 11:33:01.112391 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-gmfkp" podUID="477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9" Jul 15 11:33:01.115572 env[1206]: time="2025-07-15T11:33:01.115532685Z" level=error msg="StopPodSandbox for \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\" failed" error="failed to destroy network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:01.115698 kubelet[1944]: E0715 11:33:01.115660 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:01.115744 kubelet[1944]: E0715 11:33:01.115702 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073"} Jul 15 11:33:01.115744 kubelet[1944]: E0715 11:33:01.115722 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:01.115744 kubelet[1944]: E0715 11:33:01.115738 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-646d4f56cf-dxmld" podUID="20d347b8-3fa2-4943-b2e1-f870534ddd7b" Jul 15 11:33:01.121327 env[1206]: time="2025-07-15T11:33:01.121255351Z" level=error msg="StopPodSandbox for \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\" failed" error="failed to destroy network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:01.121457 kubelet[1944]: E0715 11:33:01.121436 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:01.121510 kubelet[1944]: E0715 11:33:01.121461 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8"} Jul 15 11:33:01.121510 kubelet[1944]: E0715 11:33:01.121494 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"761df6db-bbcd-4fe9-80ab-3a95e8a52330\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:01.121585 kubelet[1944]: E0715 11:33:01.121511 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"761df6db-bbcd-4fe9-80ab-3a95e8a52330\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-rdrvp" podUID="761df6db-bbcd-4fe9-80ab-3a95e8a52330" Jul 15 11:33:05.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.85:22-10.0.0.1:49112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:05.054661 systemd[1]: Started sshd@7-10.0.0.85:22-10.0.0.1:49112.service. Jul 15 11:33:05.055944 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 15 11:33:05.056006 kernel: audit: type=1130 audit(1752579185.053:989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.85:22-10.0.0.1:49112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:05.139000 audit[3150]: USER_ACCT pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:05.140258 sshd[3150]: Accepted publickey for core from 10.0.0.1 port 49112 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:05.143908 kernel: audit: type=1101 audit(1752579185.139:990): pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:05.144015 kernel: audit: type=1103 audit(1752579185.143:991): pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:05.143000 audit[3150]: CRED_ACQ pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:05.149530 kernel: audit: type=1006 audit(1752579185.143:992): pid=3150 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 15 11:33:05.149619 kernel: audit: type=1300 audit(1752579185.143:992): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff13b37360 a2=3 a3=0 items=0 ppid=1 pid=3150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:05.143000 audit[3150]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff13b37360 a2=3 a3=0 items=0 ppid=1 pid=3150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:05.153213 kernel: audit: type=1327 audit(1752579185.143:992): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:05.143000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:05.167244 sshd[3150]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:05.173510 systemd-logind[1195]: New session 8 of user core. Jul 15 11:33:05.174260 systemd[1]: Started session-8.scope. Jul 15 11:33:05.177000 audit[3150]: USER_START pid=3150 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:05.178000 audit[3152]: CRED_ACQ pid=3152 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:05.185487 kernel: audit: type=1105 audit(1752579185.177:993): pid=3150 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:05.185535 kernel: audit: type=1103 audit(1752579185.178:994): pid=3152 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:06.522514 sshd[3150]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:06.532981 kernel: audit: type=1106 audit(1752579186.522:995): pid=3150 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:06.535356 kernel: audit: type=1104 audit(1752579186.522:996): pid=3150 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:06.522000 audit[3150]: USER_END pid=3150 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:06.522000 audit[3150]: CRED_DISP pid=3150 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:06.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.85:22-10.0.0.1:49112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:06.524981 systemd[1]: sshd@7-10.0.0.85:22-10.0.0.1:49112.service: Deactivated successfully. Jul 15 11:33:06.525660 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:33:06.533701 systemd-logind[1195]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:33:06.534601 systemd-logind[1195]: Removed session 8. Jul 15 11:33:06.930580 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount925445431.mount: Deactivated successfully. Jul 15 11:33:07.790988 env[1206]: time="2025-07-15T11:33:07.790931157Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:07.793719 env[1206]: time="2025-07-15T11:33:07.793655954Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:07.795234 env[1206]: time="2025-07-15T11:33:07.795194653Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:07.796813 env[1206]: time="2025-07-15T11:33:07.796756076Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:07.797219 env[1206]: time="2025-07-15T11:33:07.797177307Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 15 11:33:07.804624 env[1206]: time="2025-07-15T11:33:07.804589175Z" level=info msg="CreateContainer within sandbox \"bcdee65f50aa02e3adc277dfcced3a895f2f2a4bf6f9f25d7253651e323d2311\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:33:07.823600 env[1206]: time="2025-07-15T11:33:07.823541796Z" level=info msg="CreateContainer within sandbox \"bcdee65f50aa02e3adc277dfcced3a895f2f2a4bf6f9f25d7253651e323d2311\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"80e6982fa39b924d534de8edd6ab01c2ca92a798de9e476542c4ca4cbdcc4591\"" Jul 15 11:33:07.824169 env[1206]: time="2025-07-15T11:33:07.824126584Z" level=info msg="StartContainer for \"80e6982fa39b924d534de8edd6ab01c2ca92a798de9e476542c4ca4cbdcc4591\"" Jul 15 11:33:07.840595 systemd[1]: Started cri-containerd-80e6982fa39b924d534de8edd6ab01c2ca92a798de9e476542c4ca4cbdcc4591.scope. Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f5a145628f8 items=0 ppid=2438 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:07.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830653639383266613339623932346435333464653865646436616230 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit: BPF prog-id=133 op=LOAD Jul 15 11:33:07.856000 audit[3173]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003c0088 items=0 ppid=2438 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:07.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830653639383266613339623932346435333464653865646436616230 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit: BPF prog-id=134 op=LOAD Jul 15 11:33:07.856000 audit[3173]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003c00d8 items=0 ppid=2438 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:07.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830653639383266613339623932346435333464653865646436616230 Jul 15 11:33:07.856000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:33:07.856000 audit: BPF prog-id=133 op=UNLOAD Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { perfmon } for pid=3173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit[3173]: AVC avc: denied { bpf } for pid=3173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:07.856000 audit: BPF prog-id=135 op=LOAD Jul 15 11:33:07.856000 audit[3173]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003c0168 items=0 ppid=2438 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:07.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830653639383266613339623932346435333464653865646436616230 Jul 15 11:33:08.021943 env[1206]: time="2025-07-15T11:33:08.021885037Z" level=info msg="StartContainer for \"80e6982fa39b924d534de8edd6ab01c2ca92a798de9e476542c4ca4cbdcc4591\" returns successfully" Jul 15 11:33:08.053464 systemd[1]: run-containerd-runc-k8s.io-80e6982fa39b924d534de8edd6ab01c2ca92a798de9e476542c4ca4cbdcc4591-runc.IPp1lU.mount: Deactivated successfully. Jul 15 11:33:08.054060 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:33:08.054132 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:33:08.166473 kubelet[1944]: I0715 11:33:08.166396 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-6rw4f" podStartSLOduration=1.878424883 podStartE2EDuration="24.166376294s" podCreationTimestamp="2025-07-15 11:32:44 +0000 UTC" firstStartedPulling="2025-07-15 11:32:45.51018648 +0000 UTC m=+20.884330624" lastFinishedPulling="2025-07-15 11:33:07.798137891 +0000 UTC m=+43.172282035" observedRunningTime="2025-07-15 11:33:08.04727477 +0000 UTC m=+43.421418924" watchObservedRunningTime="2025-07-15 11:33:08.166376294 +0000 UTC m=+43.540520438" Jul 15 11:33:08.167373 env[1206]: time="2025-07-15T11:33:08.167315518Z" level=info msg="StopPodSandbox for \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\"" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.245 [INFO][3252] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.246 [INFO][3252] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" iface="eth0" netns="/var/run/netns/cni-92a4ad6f-6d22-b7ae-98bc-a8898ff58778" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.246 [INFO][3252] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" iface="eth0" netns="/var/run/netns/cni-92a4ad6f-6d22-b7ae-98bc-a8898ff58778" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.246 [INFO][3252] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" iface="eth0" netns="/var/run/netns/cni-92a4ad6f-6d22-b7ae-98bc-a8898ff58778" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.246 [INFO][3252] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.246 [INFO][3252] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.314 [INFO][3261] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" HandleID="k8s-pod-network.a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Workload="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.316 [INFO][3261] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.317 [INFO][3261] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.323 [WARNING][3261] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" HandleID="k8s-pod-network.a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Workload="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.323 [INFO][3261] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" HandleID="k8s-pod-network.a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Workload="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.325 [INFO][3261] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:08.328526 env[1206]: 2025-07-15 11:33:08.326 [INFO][3252] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:08.329174 env[1206]: time="2025-07-15T11:33:08.328603414Z" level=info msg="TearDown network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\" successfully" Jul 15 11:33:08.329174 env[1206]: time="2025-07-15T11:33:08.328632409Z" level=info msg="StopPodSandbox for \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\" returns successfully" Jul 15 11:33:08.330693 systemd[1]: run-netns-cni\x2d92a4ad6f\x2d6d22\x2db7ae\x2d98bc\x2da8898ff58778.mount: Deactivated successfully. Jul 15 11:33:08.356704 kubelet[1944]: I0715 11:33:08.356632 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-tzsw7\" (UniqueName: \"kubernetes.io/projected/20d347b8-3fa2-4943-b2e1-f870534ddd7b-kube-api-access-tzsw7\") pod \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\" (UID: \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\") " Jul 15 11:33:08.356704 kubelet[1944]: I0715 11:33:08.356699 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/20d347b8-3fa2-4943-b2e1-f870534ddd7b-whisker-backend-key-pair\") pod \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\" (UID: \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\") " Jul 15 11:33:08.356917 kubelet[1944]: I0715 11:33:08.356750 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/20d347b8-3fa2-4943-b2e1-f870534ddd7b-whisker-ca-bundle\") pod \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\" (UID: \"20d347b8-3fa2-4943-b2e1-f870534ddd7b\") " Jul 15 11:33:08.357188 kubelet[1944]: I0715 11:33:08.357166 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/20d347b8-3fa2-4943-b2e1-f870534ddd7b-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "20d347b8-3fa2-4943-b2e1-f870534ddd7b" (UID: "20d347b8-3fa2-4943-b2e1-f870534ddd7b"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 15 11:33:08.360261 kubelet[1944]: I0715 11:33:08.360209 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/20d347b8-3fa2-4943-b2e1-f870534ddd7b-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "20d347b8-3fa2-4943-b2e1-f870534ddd7b" (UID: "20d347b8-3fa2-4943-b2e1-f870534ddd7b"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 15 11:33:08.360766 kubelet[1944]: I0715 11:33:08.360714 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/20d347b8-3fa2-4943-b2e1-f870534ddd7b-kube-api-access-tzsw7" (OuterVolumeSpecName: "kube-api-access-tzsw7") pod "20d347b8-3fa2-4943-b2e1-f870534ddd7b" (UID: "20d347b8-3fa2-4943-b2e1-f870534ddd7b"). InnerVolumeSpecName "kube-api-access-tzsw7". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 15 11:33:08.457148 kubelet[1944]: I0715 11:33:08.457102 1944 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-tzsw7\" (UniqueName: \"kubernetes.io/projected/20d347b8-3fa2-4943-b2e1-f870534ddd7b-kube-api-access-tzsw7\") on node \"localhost\" DevicePath \"\"" Jul 15 11:33:08.457148 kubelet[1944]: I0715 11:33:08.457136 1944 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/20d347b8-3fa2-4943-b2e1-f870534ddd7b-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:33:08.457148 kubelet[1944]: I0715 11:33:08.457144 1944 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/20d347b8-3fa2-4943-b2e1-f870534ddd7b-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:33:08.713432 systemd[1]: Removed slice kubepods-besteffort-pod20d347b8_3fa2_4943_b2e1_f870534ddd7b.slice. Jul 15 11:33:08.930916 systemd[1]: var-lib-kubelet-pods-20d347b8\x2d3fa2\x2d4943\x2db2e1\x2df870534ddd7b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dtzsw7.mount: Deactivated successfully. Jul 15 11:33:08.931025 systemd[1]: var-lib-kubelet-pods-20d347b8\x2d3fa2\x2d4943\x2db2e1\x2df870534ddd7b-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:33:09.101257 systemd[1]: Created slice kubepods-besteffort-podd9eb06c6_6a23_459c_97c3_d9d26170fcc7.slice. Jul 15 11:33:09.161386 kubelet[1944]: I0715 11:33:09.161334 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d9eb06c6-6a23-459c-97c3-d9d26170fcc7-whisker-backend-key-pair\") pod \"whisker-77b7984545-k2wxb\" (UID: \"d9eb06c6-6a23-459c-97c3-d9d26170fcc7\") " pod="calico-system/whisker-77b7984545-k2wxb" Jul 15 11:33:09.161386 kubelet[1944]: I0715 11:33:09.161381 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d9eb06c6-6a23-459c-97c3-d9d26170fcc7-whisker-ca-bundle\") pod \"whisker-77b7984545-k2wxb\" (UID: \"d9eb06c6-6a23-459c-97c3-d9d26170fcc7\") " pod="calico-system/whisker-77b7984545-k2wxb" Jul 15 11:33:09.161572 kubelet[1944]: I0715 11:33:09.161405 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-988vv\" (UniqueName: \"kubernetes.io/projected/d9eb06c6-6a23-459c-97c3-d9d26170fcc7-kube-api-access-988vv\") pod \"whisker-77b7984545-k2wxb\" (UID: \"d9eb06c6-6a23-459c-97c3-d9d26170fcc7\") " pod="calico-system/whisker-77b7984545-k2wxb" Jul 15 11:33:09.339000 audit[3362]: AVC avc: denied { write } for pid=3362 comm="tee" name="fd" dev="proc" ino=25973 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:09.339000 audit[3362]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef16d67e1 a2=241 a3=1b6 items=1 ppid=3328 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.339000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:33:09.339000 audit: PATH item=0 name="/dev/fd/63" inode=23537 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:09.339000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:09.345000 audit[3372]: AVC avc: denied { write } for pid=3372 comm="tee" name="fd" dev="proc" ino=25982 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:09.345000 audit[3372]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffca299e7d2 a2=241 a3=1b6 items=1 ppid=3319 pid=3372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.345000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:33:09.345000 audit: PATH item=0 name="/dev/fd/63" inode=25970 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:09.345000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:09.345000 audit[3353]: AVC avc: denied { write } for pid=3353 comm="tee" name="fd" dev="proc" ino=23542 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:09.345000 audit[3353]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffd23d27e2 a2=241 a3=1b6 items=1 ppid=3313 pid=3353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.345000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:33:09.345000 audit: PATH item=0 name="/dev/fd/63" inode=24165 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:09.345000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:09.351000 audit[3343]: AVC avc: denied { write } for pid=3343 comm="tee" name="fd" dev="proc" ino=25989 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:09.351000 audit[3343]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff2169b7e1 a2=241 a3=1b6 items=1 ppid=3314 pid=3343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.351000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:33:09.351000 audit: PATH item=0 name="/dev/fd/63" inode=23532 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:09.351000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:09.353000 audit[3375]: AVC avc: denied { write } for pid=3375 comm="tee" name="fd" dev="proc" ino=25994 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:09.353000 audit[3375]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdbb6917e3 a2=241 a3=1b6 items=1 ppid=3324 pid=3375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.353000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:33:09.353000 audit: PATH item=0 name="/dev/fd/63" inode=23539 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:09.353000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:09.357000 audit[3385]: AVC avc: denied { write } for pid=3385 comm="tee" name="fd" dev="proc" ino=25998 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:09.357000 audit[3385]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffea6c607e1 a2=241 a3=1b6 items=1 ppid=3315 pid=3385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.357000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:33:09.357000 audit: PATH item=0 name="/dev/fd/63" inode=25991 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:09.357000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:09.362000 audit[3383]: AVC avc: denied { write } for pid=3383 comm="tee" name="fd" dev="proc" ino=24171 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:09.362000 audit[3383]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcef7887d1 a2=241 a3=1b6 items=1 ppid=3318 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.362000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:33:09.362000 audit: PATH item=0 name="/dev/fd/63" inode=25986 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:09.362000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:09.409049 env[1206]: time="2025-07-15T11:33:09.408986958Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-77b7984545-k2wxb,Uid:d9eb06c6-6a23-459c-97c3-d9d26170fcc7,Namespace:calico-system,Attempt:0,}" Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit: BPF prog-id=136 op=LOAD Jul 15 11:33:09.485000 audit[3432]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf44dc680 a2=98 a3=1fffffffffffffff items=0 ppid=3329 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.485000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:33:09.485000 audit: BPF prog-id=136 op=UNLOAD Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit: BPF prog-id=137 op=LOAD Jul 15 11:33:09.485000 audit[3432]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf44dc560 a2=94 a3=3 items=0 ppid=3329 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.485000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:33:09.485000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { bpf } for pid=3432 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit: BPF prog-id=138 op=LOAD Jul 15 11:33:09.485000 audit[3432]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf44dc5a0 a2=94 a3=7ffcf44dc780 items=0 ppid=3329 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.485000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:33:09.485000 audit: BPF prog-id=138 op=UNLOAD Jul 15 11:33:09.485000 audit[3432]: AVC avc: denied { perfmon } for pid=3432 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.485000 audit[3432]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffcf44dc670 a2=50 a3=a000000085 items=0 ppid=3329 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.485000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:33:09.486000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.486000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.486000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.486000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.486000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.486000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.486000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.486000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.486000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.486000 audit: BPF prog-id=139 op=LOAD Jul 15 11:33:09.486000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc4253fb40 a2=98 a3=3 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.486000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.487000 audit: BPF prog-id=139 op=UNLOAD Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit: BPF prog-id=140 op=LOAD Jul 15 11:33:09.487000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc4253f930 a2=94 a3=54428f items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.487000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.487000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.487000 audit: BPF prog-id=141 op=LOAD Jul 15 11:33:09.487000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc4253f960 a2=94 a3=2 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.487000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.487000 audit: BPF prog-id=141 op=UNLOAD Jul 15 11:33:09.539141 systemd-networkd[1026]: cali2d0ef4288aa: Link UP Jul 15 11:33:09.541497 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:33:09.541597 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2d0ef4288aa: link becomes ready Jul 15 11:33:09.541628 systemd-networkd[1026]: cali2d0ef4288aa: Gained carrier Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.448 [INFO][3401] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.459 [INFO][3401] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--77b7984545--k2wxb-eth0 whisker-77b7984545- calico-system d9eb06c6-6a23-459c-97c3-d9d26170fcc7 1003 0 2025-07-15 11:33:09 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:77b7984545 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-77b7984545-k2wxb eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali2d0ef4288aa [] [] }} ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Namespace="calico-system" Pod="whisker-77b7984545-k2wxb" WorkloadEndpoint="localhost-k8s-whisker--77b7984545--k2wxb-" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.459 [INFO][3401] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Namespace="calico-system" Pod="whisker-77b7984545-k2wxb" WorkloadEndpoint="localhost-k8s-whisker--77b7984545--k2wxb-eth0" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.502 [INFO][3419] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" HandleID="k8s-pod-network.39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Workload="localhost-k8s-whisker--77b7984545--k2wxb-eth0" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.502 [INFO][3419] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" HandleID="k8s-pod-network.39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Workload="localhost-k8s-whisker--77b7984545--k2wxb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000131760), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-77b7984545-k2wxb", "timestamp":"2025-07-15 11:33:09.502564327 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.502 [INFO][3419] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.502 [INFO][3419] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.502 [INFO][3419] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.510 [INFO][3419] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" host="localhost" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.514 [INFO][3419] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.518 [INFO][3419] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.520 [INFO][3419] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.521 [INFO][3419] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.521 [INFO][3419] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" host="localhost" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.522 [INFO][3419] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025 Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.525 [INFO][3419] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" host="localhost" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.529 [INFO][3419] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" host="localhost" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.529 [INFO][3419] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" host="localhost" Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.529 [INFO][3419] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:09.554140 env[1206]: 2025-07-15 11:33:09.529 [INFO][3419] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" HandleID="k8s-pod-network.39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Workload="localhost-k8s-whisker--77b7984545--k2wxb-eth0" Jul 15 11:33:09.554757 env[1206]: 2025-07-15 11:33:09.531 [INFO][3401] cni-plugin/k8s.go 418: Populated endpoint ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Namespace="calico-system" Pod="whisker-77b7984545-k2wxb" WorkloadEndpoint="localhost-k8s-whisker--77b7984545--k2wxb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--77b7984545--k2wxb-eth0", GenerateName:"whisker-77b7984545-", Namespace:"calico-system", SelfLink:"", UID:"d9eb06c6-6a23-459c-97c3-d9d26170fcc7", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"77b7984545", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-77b7984545-k2wxb", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali2d0ef4288aa", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:09.554757 env[1206]: 2025-07-15 11:33:09.531 [INFO][3401] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Namespace="calico-system" Pod="whisker-77b7984545-k2wxb" WorkloadEndpoint="localhost-k8s-whisker--77b7984545--k2wxb-eth0" Jul 15 11:33:09.554757 env[1206]: 2025-07-15 11:33:09.531 [INFO][3401] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2d0ef4288aa ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Namespace="calico-system" Pod="whisker-77b7984545-k2wxb" WorkloadEndpoint="localhost-k8s-whisker--77b7984545--k2wxb-eth0" Jul 15 11:33:09.554757 env[1206]: 2025-07-15 11:33:09.541 [INFO][3401] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Namespace="calico-system" Pod="whisker-77b7984545-k2wxb" WorkloadEndpoint="localhost-k8s-whisker--77b7984545--k2wxb-eth0" Jul 15 11:33:09.554757 env[1206]: 2025-07-15 11:33:09.541 [INFO][3401] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Namespace="calico-system" Pod="whisker-77b7984545-k2wxb" WorkloadEndpoint="localhost-k8s-whisker--77b7984545--k2wxb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--77b7984545--k2wxb-eth0", GenerateName:"whisker-77b7984545-", Namespace:"calico-system", SelfLink:"", UID:"d9eb06c6-6a23-459c-97c3-d9d26170fcc7", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"77b7984545", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025", Pod:"whisker-77b7984545-k2wxb", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali2d0ef4288aa", MAC:"02:3b:8b:ed:cd:fa", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:09.554757 env[1206]: 2025-07-15 11:33:09.552 [INFO][3401] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025" Namespace="calico-system" Pod="whisker-77b7984545-k2wxb" WorkloadEndpoint="localhost-k8s-whisker--77b7984545--k2wxb-eth0" Jul 15 11:33:09.568514 env[1206]: time="2025-07-15T11:33:09.568446250Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:09.568514 env[1206]: time="2025-07-15T11:33:09.568483319Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:09.568514 env[1206]: time="2025-07-15T11:33:09.568493118Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:09.568743 env[1206]: time="2025-07-15T11:33:09.568603466Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025 pid=3469 runtime=io.containerd.runc.v2 Jul 15 11:33:09.577653 systemd[1]: Started cri-containerd-39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025.scope. Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.588000 audit: BPF prog-id=142 op=LOAD Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3469 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339313035663935316362316563346232313137623830376366363964 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3469 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339313035663935316362316563346232313137623830376366363964 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit: BPF prog-id=143 op=LOAD Jul 15 11:33:09.589000 audit[3478]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00022b040 items=0 ppid=3469 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339313035663935316362316563346232313137623830376366363964 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit: BPF prog-id=144 op=LOAD Jul 15 11:33:09.589000 audit[3478]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00022b088 items=0 ppid=3469 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339313035663935316362316563346232313137623830376366363964 Jul 15 11:33:09.589000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:33:09.589000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.589000 audit: BPF prog-id=145 op=LOAD Jul 15 11:33:09.589000 audit[3478]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00022b498 items=0 ppid=3469 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339313035663935316362316563346232313137623830376366363964 Jul 15 11:33:09.591084 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit: BPF prog-id=146 op=LOAD Jul 15 11:33:09.596000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc4253f820 a2=94 a3=1 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.596000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.596000 audit: BPF prog-id=146 op=UNLOAD Jul 15 11:33:09.596000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.596000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc4253f8f0 a2=50 a3=7ffc4253f9d0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.596000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4253f830 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4253f860 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4253f770 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4253f880 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4253f860 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4253f850 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4253f880 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4253f860 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4253f880 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4253f850 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.604000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.604000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4253f8c0 a2=28 a3=0 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc4253f670 a2=50 a3=1 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.605000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit: BPF prog-id=147 op=LOAD Jul 15 11:33:09.605000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc4253f670 a2=94 a3=5 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.605000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.605000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc4253f720 a2=50 a3=1 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.605000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc4253f840 a2=4 a3=38 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.605000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { confidentiality } for pid=3441 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:09.605000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc4253f890 a2=94 a3=6 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.605000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.605000 audit[3441]: AVC avc: denied { confidentiality } for pid=3441 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:09.605000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc4253f040 a2=94 a3=88 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.605000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.606000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.606000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.606000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.606000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.606000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.606000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.606000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.606000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.606000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc4253f040 a2=94 a3=88 items=0 ppid=3329 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.606000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:09.616287 env[1206]: time="2025-07-15T11:33:09.616240593Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-77b7984545-k2wxb,Uid:d9eb06c6-6a23-459c-97c3-d9d26170fcc7,Namespace:calico-system,Attempt:0,} returns sandbox id \"39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025\"" Jul 15 11:33:09.618248 env[1206]: time="2025-07-15T11:33:09.618208177Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:33:09.618000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.618000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.618000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.618000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.618000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.618000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.618000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.618000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.618000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.618000 audit: BPF prog-id=148 op=LOAD Jul 15 11:33:09.618000 audit[3503]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff5db42a10 a2=98 a3=1999999999999999 items=0 ppid=3329 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.618000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:33:09.619000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit: BPF prog-id=149 op=LOAD Jul 15 11:33:09.619000 audit[3503]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff5db428f0 a2=94 a3=ffff items=0 ppid=3329 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.619000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:33:09.619000 audit: BPF prog-id=149 op=UNLOAD Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { perfmon } for pid=3503 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit[3503]: AVC avc: denied { bpf } for pid=3503 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.619000 audit: BPF prog-id=150 op=LOAD Jul 15 11:33:09.619000 audit[3503]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff5db42930 a2=94 a3=7fff5db42b10 items=0 ppid=3329 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.619000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:33:09.619000 audit: BPF prog-id=150 op=UNLOAD Jul 15 11:33:09.671558 systemd-networkd[1026]: vxlan.calico: Link UP Jul 15 11:33:09.671562 systemd-networkd[1026]: vxlan.calico: Gained carrier Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit: BPF prog-id=151 op=LOAD Jul 15 11:33:09.674000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce229f560 a2=98 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.674000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.674000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.674000 audit: BPF prog-id=152 op=LOAD Jul 15 11:33:09.674000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce229f370 a2=94 a3=54428f items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.674000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit: BPF prog-id=153 op=LOAD Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce229f3a0 a2=94 a3=2 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit: BPF prog-id=153 op=UNLOAD Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffce229f270 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce229f2a0 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce229f1b0 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffce229f2c0 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffce229f2a0 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffce229f290 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffce229f2c0 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce229f2a0 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce229f2c0 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce229f290 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffce229f300 a2=28 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.675000 audit: BPF prog-id=154 op=LOAD Jul 15 11:33:09.675000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffce229f170 a2=94 a3=0 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.675000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.675000 audit: BPF prog-id=154 op=UNLOAD Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffce229f160 a2=50 a3=2800 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.676000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffce229f160 a2=50 a3=2800 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.676000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit: BPF prog-id=155 op=LOAD Jul 15 11:33:09.676000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffce229e980 a2=94 a3=2 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.676000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.676000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.676000 audit: BPF prog-id=156 op=LOAD Jul 15 11:33:09.676000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffce229ea80 a2=94 a3=30 items=0 ppid=3329 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.676000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit: BPF prog-id=157 op=LOAD Jul 15 11:33:09.679000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc1237ecb0 a2=98 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.679000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.679000 audit: BPF prog-id=157 op=UNLOAD Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit: BPF prog-id=158 op=LOAD Jul 15 11:33:09.679000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc1237eaa0 a2=94 a3=54428f items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.679000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.679000 audit: BPF prog-id=158 op=UNLOAD Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.679000 audit: BPF prog-id=159 op=LOAD Jul 15 11:33:09.679000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc1237ead0 a2=94 a3=2 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.679000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.679000 audit: BPF prog-id=159 op=UNLOAD Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit: BPF prog-id=160 op=LOAD Jul 15 11:33:09.780000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc1237e990 a2=94 a3=1 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.780000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.780000 audit: BPF prog-id=160 op=UNLOAD Jul 15 11:33:09.780000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.780000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc1237ea60 a2=50 a3=7ffc1237eb40 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.780000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.788000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.788000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc1237e9a0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.788000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc1237e9d0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc1237e8e0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc1237e9f0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc1237e9d0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc1237e9c0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc1237e9f0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc1237e9d0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc1237e9f0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc1237e9c0 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc1237ea30 a2=28 a3=0 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc1237e7e0 a2=50 a3=1 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit: BPF prog-id=161 op=LOAD Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc1237e7e0 a2=94 a3=5 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit: BPF prog-id=161 op=UNLOAD Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc1237e890 a2=50 a3=1 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc1237e9b0 a2=4 a3=38 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { confidentiality } for pid=3532 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc1237ea00 a2=94 a3=6 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.789000 audit[3532]: AVC avc: denied { confidentiality } for pid=3532 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:09.789000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc1237e1b0 a2=94 a3=88 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.789000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { perfmon } for pid=3532 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { confidentiality } for pid=3532 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:09.790000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc1237e1b0 a2=94 a3=88 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.790000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc1237fbe0 a2=10 a3=208 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.790000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc1237fa80 a2=10 a3=3 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.790000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc1237fa20 a2=10 a3=3 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.790000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.790000 audit[3532]: AVC avc: denied { bpf } for pid=3532 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:09.790000 audit[3532]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc1237fa20 a2=10 a3=7 items=0 ppid=3329 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.790000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:09.799000 audit: BPF prog-id=156 op=UNLOAD Jul 15 11:33:09.836000 audit[3561]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3561 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:09.836000 audit[3561]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffd2a95e160 a2=0 a3=7ffd2a95e14c items=0 ppid=3329 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.836000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:09.841000 audit[3560]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3560 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:09.841000 audit[3560]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffe06a34300 a2=0 a3=7ffe06a342ec items=0 ppid=3329 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.841000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:09.843000 audit[3559]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3559 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:09.843000 audit[3559]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7fffc09cfd20 a2=0 a3=7fffc09cfd0c items=0 ppid=3329 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.843000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:09.846000 audit[3564]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3564 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:09.846000 audit[3564]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffe30b98a10 a2=0 a3=7ffe30b989fc items=0 ppid=3329 pid=3564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:09.846000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:10.709925 kubelet[1944]: I0715 11:33:10.709878 1944 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="20d347b8-3fa2-4943-b2e1-f870534ddd7b" path="/var/lib/kubelet/pods/20d347b8-3fa2-4943-b2e1-f870534ddd7b/volumes" Jul 15 11:33:10.868958 systemd-networkd[1026]: vxlan.calico: Gained IPv6LL Jul 15 11:33:11.109273 env[1206]: time="2025-07-15T11:33:11.109164513Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:11.111132 env[1206]: time="2025-07-15T11:33:11.111107640Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:11.112723 env[1206]: time="2025-07-15T11:33:11.112685332Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:11.114291 env[1206]: time="2025-07-15T11:33:11.114259306Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:11.114801 env[1206]: time="2025-07-15T11:33:11.114767771Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 15 11:33:11.117480 env[1206]: time="2025-07-15T11:33:11.117448473Z" level=info msg="CreateContainer within sandbox \"39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:33:11.129434 env[1206]: time="2025-07-15T11:33:11.129386593Z" level=info msg="CreateContainer within sandbox \"39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"2aa2dcf51d9bd1b2fd34446ffbaa08f0738614ca26abf7520296ba21a12e2638\"" Jul 15 11:33:11.129874 env[1206]: time="2025-07-15T11:33:11.129793266Z" level=info msg="StartContainer for \"2aa2dcf51d9bd1b2fd34446ffbaa08f0738614ca26abf7520296ba21a12e2638\"" Jul 15 11:33:11.149115 systemd[1]: Started cri-containerd-2aa2dcf51d9bd1b2fd34446ffbaa08f0738614ca26abf7520296ba21a12e2638.scope. Jul 15 11:33:11.161412 kernel: kauditd_printk_skb: 664 callbacks suppressed Jul 15 11:33:11.161516 kernel: audit: type=1400 audit(1752579191.156:1131): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.161545 kernel: audit: type=1400 audit(1752579191.156:1132): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.167349 kernel: audit: type=1400 audit(1752579191.156:1133): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.167389 kernel: audit: type=1400 audit(1752579191.156:1134): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.170122 kernel: audit: type=1400 audit(1752579191.156:1135): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.175886 kernel: audit: type=1400 audit(1752579191.156:1136): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.175928 kernel: audit: type=1400 audit(1752579191.156:1137): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.181501 kernel: audit: type=1400 audit(1752579191.156:1138): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.181543 kernel: audit: type=1400 audit(1752579191.156:1139): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.187387 kernel: audit: type=1400 audit(1752579191.160:1140): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit: BPF prog-id=162 op=LOAD Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3469 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:11.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613264636635316439626431623266643334343436666662616130 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3469 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:11.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613264636635316439626431623266643334343436666662616130 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.160000 audit: BPF prog-id=163 op=LOAD Jul 15 11:33:11.160000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001dbdc0 items=0 ppid=3469 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:11.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613264636635316439626431623266643334343436666662616130 Jul 15 11:33:11.163000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.163000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.163000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.163000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.163000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.163000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.163000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.163000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.163000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.163000 audit: BPF prog-id=164 op=LOAD Jul 15 11:33:11.163000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001dbe08 items=0 ppid=3469 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:11.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613264636635316439626431623266643334343436666662616130 Jul 15 11:33:11.166000 audit: BPF prog-id=164 op=UNLOAD Jul 15 11:33:11.166000 audit: BPF prog-id=163 op=UNLOAD Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:11.166000 audit: BPF prog-id=165 op=LOAD Jul 15 11:33:11.166000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a8218 items=0 ppid=3469 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:11.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613264636635316439626431623266643334343436666662616130 Jul 15 11:33:11.204932 env[1206]: time="2025-07-15T11:33:11.204872520Z" level=info msg="StartContainer for \"2aa2dcf51d9bd1b2fd34446ffbaa08f0738614ca26abf7520296ba21a12e2638\" returns successfully" Jul 15 11:33:11.206304 env[1206]: time="2025-07-15T11:33:11.206268631Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:33:11.212000 audit[3591]: AVC avc: denied { search } for pid=3591 comm="nginx" name="crypto" dev="proc" ino=26291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c217,c923 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:33:11.212000 audit[3591]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff88363f728 a2=0 a3=0 items=0 ppid=3469 pid=3591 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c217,c923 key=(null) Jul 15 11:33:11.212000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:33:11.445022 systemd-networkd[1026]: cali2d0ef4288aa: Gained IPv6LL Jul 15 11:33:11.526356 systemd[1]: Started sshd@8-10.0.0.85:22-10.0.0.1:38782.service. Jul 15 11:33:11.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.85:22-10.0.0.1:38782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:11.566000 audit[3615]: USER_ACCT pid=3615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:11.567335 sshd[3615]: Accepted publickey for core from 10.0.0.1 port 38782 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:11.567000 audit[3615]: CRED_ACQ pid=3615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:11.567000 audit[3615]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe33df1d20 a2=3 a3=0 items=0 ppid=1 pid=3615 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:11.567000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:11.568517 sshd[3615]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:11.572483 systemd-logind[1195]: New session 9 of user core. Jul 15 11:33:11.573358 systemd[1]: Started session-9.scope. Jul 15 11:33:11.577000 audit[3615]: USER_START pid=3615 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:11.578000 audit[3617]: CRED_ACQ pid=3617 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:11.705420 sshd[3615]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:11.705000 audit[3615]: USER_END pid=3615 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:11.705000 audit[3615]: CRED_DISP pid=3615 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:11.708054 env[1206]: time="2025-07-15T11:33:11.708020100Z" level=info msg="StopPodSandbox for \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\"" Jul 15 11:33:11.708199 systemd[1]: sshd@8-10.0.0.85:22-10.0.0.1:38782.service: Deactivated successfully. Jul 15 11:33:11.709063 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:33:11.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.85:22-10.0.0.1:38782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:11.711048 systemd-logind[1195]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:33:11.712106 systemd-logind[1195]: Removed session 9. Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.787 [INFO][3641] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.787 [INFO][3641] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" iface="eth0" netns="/var/run/netns/cni-7a6ffecd-ea84-a727-69b9-137a696e668b" Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.787 [INFO][3641] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" iface="eth0" netns="/var/run/netns/cni-7a6ffecd-ea84-a727-69b9-137a696e668b" Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.787 [INFO][3641] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" iface="eth0" netns="/var/run/netns/cni-7a6ffecd-ea84-a727-69b9-137a696e668b" Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.787 [INFO][3641] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.787 [INFO][3641] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.809 [INFO][3650] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" HandleID="k8s-pod-network.72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.809 [INFO][3650] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.809 [INFO][3650] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.815 [WARNING][3650] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" HandleID="k8s-pod-network.72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.815 [INFO][3650] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" HandleID="k8s-pod-network.72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.817 [INFO][3650] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:11.821417 env[1206]: 2025-07-15 11:33:11.819 [INFO][3641] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:11.821915 env[1206]: time="2025-07-15T11:33:11.821576621Z" level=info msg="TearDown network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\" successfully" Jul 15 11:33:11.821915 env[1206]: time="2025-07-15T11:33:11.821607730Z" level=info msg="StopPodSandbox for \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\" returns successfully" Jul 15 11:33:11.822338 env[1206]: time="2025-07-15T11:33:11.822308516Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6644dcb798-mhcvv,Uid:c18c836b-6a9f-4a81-8d19-0a21744e1876,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:33:12.057851 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:33:12.057973 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic5d6ad04a5b: link becomes ready Jul 15 11:33:12.054788 systemd-networkd[1026]: calic5d6ad04a5b: Link UP Jul 15 11:33:12.059245 systemd-networkd[1026]: calic5d6ad04a5b: Gained carrier Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.866 [INFO][3658] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0 calico-apiserver-6644dcb798- calico-apiserver c18c836b-6a9f-4a81-8d19-0a21744e1876 1027 0 2025-07-15 11:32:41 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6644dcb798 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6644dcb798-mhcvv eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic5d6ad04a5b [] [] }} ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-mhcvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.867 [INFO][3658] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-mhcvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.889 [INFO][3673] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" HandleID="k8s-pod-network.62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.890 [INFO][3673] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" HandleID="k8s-pod-network.62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c96a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6644dcb798-mhcvv", "timestamp":"2025-07-15 11:33:11.889810486 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.890 [INFO][3673] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.890 [INFO][3673] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.890 [INFO][3673] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.916 [INFO][3673] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" host="localhost" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.920 [INFO][3673] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.924 [INFO][3673] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.925 [INFO][3673] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.926 [INFO][3673] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.926 [INFO][3673] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" host="localhost" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:11.927 [INFO][3673] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318 Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:12.043 [INFO][3673] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" host="localhost" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:12.047 [INFO][3673] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" host="localhost" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:12.048 [INFO][3673] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" host="localhost" Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:12.048 [INFO][3673] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:12.077203 env[1206]: 2025-07-15 11:33:12.048 [INFO][3673] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" HandleID="k8s-pod-network.62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:12.077805 env[1206]: 2025-07-15 11:33:12.050 [INFO][3658] cni-plugin/k8s.go 418: Populated endpoint ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-mhcvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0", GenerateName:"calico-apiserver-6644dcb798-", Namespace:"calico-apiserver", SelfLink:"", UID:"c18c836b-6a9f-4a81-8d19-0a21744e1876", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6644dcb798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6644dcb798-mhcvv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic5d6ad04a5b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:12.077805 env[1206]: 2025-07-15 11:33:12.051 [INFO][3658] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-mhcvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:12.077805 env[1206]: 2025-07-15 11:33:12.051 [INFO][3658] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic5d6ad04a5b ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-mhcvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:12.077805 env[1206]: 2025-07-15 11:33:12.057 [INFO][3658] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-mhcvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:12.077805 env[1206]: 2025-07-15 11:33:12.058 [INFO][3658] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-mhcvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0", GenerateName:"calico-apiserver-6644dcb798-", Namespace:"calico-apiserver", SelfLink:"", UID:"c18c836b-6a9f-4a81-8d19-0a21744e1876", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6644dcb798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318", Pod:"calico-apiserver-6644dcb798-mhcvv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic5d6ad04a5b", MAC:"52:a9:46:e7:c5:a3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:12.077805 env[1206]: 2025-07-15 11:33:12.075 [INFO][3658] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-mhcvv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:12.085000 audit[3692]: NETFILTER_CFG table=filter:105 family=2 entries=50 op=nft_register_chain pid=3692 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:12.085000 audit[3692]: SYSCALL arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7ffcd0902d10 a2=0 a3=7ffcd0902cfc items=0 ppid=3329 pid=3692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.085000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:12.129503 systemd[1]: run-netns-cni\x2d7a6ffecd\x2dea84\x2da727\x2d69b9\x2d137a696e668b.mount: Deactivated successfully. Jul 15 11:33:12.237221 env[1206]: time="2025-07-15T11:33:12.237153933Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:12.237630 env[1206]: time="2025-07-15T11:33:12.237200620Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:12.237630 env[1206]: time="2025-07-15T11:33:12.237215899Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:12.237630 env[1206]: time="2025-07-15T11:33:12.237375618Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318 pid=3700 runtime=io.containerd.runc.v2 Jul 15 11:33:12.252309 systemd[1]: run-containerd-runc-k8s.io-62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318-runc.teQ1Df.mount: Deactivated successfully. Jul 15 11:33:12.255685 systemd[1]: Started cri-containerd-62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318.scope. Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.263000 audit: BPF prog-id=166 op=LOAD Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393437633861636463323965336534663630663561323635373937 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393437633861636463323965336534663630663561323635373937 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit: BPF prog-id=167 op=LOAD Jul 15 11:33:12.264000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002a7fa0 items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393437633861636463323965336534663630663561323635373937 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit: BPF prog-id=168 op=LOAD Jul 15 11:33:12.264000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002a7fe8 items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393437633861636463323965336534663630663561323635373937 Jul 15 11:33:12.264000 audit: BPF prog-id=168 op=UNLOAD Jul 15 11:33:12.264000 audit: BPF prog-id=167 op=UNLOAD Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:12.264000 audit: BPF prog-id=169 op=LOAD Jul 15 11:33:12.264000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030c3f8 items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393437633861636463323965336534663630663561323635373937 Jul 15 11:33:12.265913 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:12.314700 env[1206]: time="2025-07-15T11:33:12.288503494Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6644dcb798-mhcvv,Uid:c18c836b-6a9f-4a81-8d19-0a21744e1876,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318\"" Jul 15 11:33:12.708345 env[1206]: time="2025-07-15T11:33:12.708257808Z" level=info msg="StopPodSandbox for \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\"" Jul 15 11:33:12.708781 env[1206]: time="2025-07-15T11:33:12.708733872Z" level=info msg="StopPodSandbox for \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\"" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.752 [INFO][3754] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.753 [INFO][3754] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" iface="eth0" netns="/var/run/netns/cni-a03a0ceb-dc23-67ec-9ea3-651ef842381c" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.753 [INFO][3754] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" iface="eth0" netns="/var/run/netns/cni-a03a0ceb-dc23-67ec-9ea3-651ef842381c" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.753 [INFO][3754] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" iface="eth0" netns="/var/run/netns/cni-a03a0ceb-dc23-67ec-9ea3-651ef842381c" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.753 [INFO][3754] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.753 [INFO][3754] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.785 [INFO][3769] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" HandleID="k8s-pod-network.74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.785 [INFO][3769] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.785 [INFO][3769] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.791 [WARNING][3769] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" HandleID="k8s-pod-network.74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.791 [INFO][3769] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" HandleID="k8s-pod-network.74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.792 [INFO][3769] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:12.795336 env[1206]: 2025-07-15 11:33:12.794 [INFO][3754] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:12.797572 systemd[1]: run-netns-cni\x2da03a0ceb\x2ddc23\x2d67ec\x2d9ea3\x2d651ef842381c.mount: Deactivated successfully. Jul 15 11:33:12.798385 env[1206]: time="2025-07-15T11:33:12.798336384Z" level=info msg="TearDown network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\" successfully" Jul 15 11:33:12.798385 env[1206]: time="2025-07-15T11:33:12.798380647Z" level=info msg="StopPodSandbox for \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\" returns successfully" Jul 15 11:33:12.799141 env[1206]: time="2025-07-15T11:33:12.799107832Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6644dcb798-st6rl,Uid:cbc702ff-f005-4e72-822a-27c70a812c58,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.758 [INFO][3755] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.759 [INFO][3755] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" iface="eth0" netns="/var/run/netns/cni-063d414b-3b72-85e6-323e-84e54e957cf6" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.759 [INFO][3755] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" iface="eth0" netns="/var/run/netns/cni-063d414b-3b72-85e6-323e-84e54e957cf6" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.759 [INFO][3755] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" iface="eth0" netns="/var/run/netns/cni-063d414b-3b72-85e6-323e-84e54e957cf6" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.759 [INFO][3755] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.759 [INFO][3755] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.791 [INFO][3772] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" HandleID="k8s-pod-network.f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.791 [INFO][3772] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.792 [INFO][3772] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.799 [WARNING][3772] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" HandleID="k8s-pod-network.f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.799 [INFO][3772] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" HandleID="k8s-pod-network.f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.800 [INFO][3772] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:12.803199 env[1206]: 2025-07-15 11:33:12.801 [INFO][3755] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:12.803636 env[1206]: time="2025-07-15T11:33:12.803343753Z" level=info msg="TearDown network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\" successfully" Jul 15 11:33:12.803636 env[1206]: time="2025-07-15T11:33:12.803374811Z" level=info msg="StopPodSandbox for \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\" returns successfully" Jul 15 11:33:12.803925 env[1206]: time="2025-07-15T11:33:12.803888385Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-4pzc9,Uid:c09f3584-588b-4ef0-bea9-18b4680d3787,Namespace:calico-system,Attempt:1,}" Jul 15 11:33:12.948941 systemd-networkd[1026]: calibc8b11759e5: Link UP Jul 15 11:33:12.951508 systemd-networkd[1026]: calibc8b11759e5: Gained carrier Jul 15 11:33:12.952017 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibc8b11759e5: link becomes ready Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.864 [INFO][3788] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0 calico-apiserver-6644dcb798- calico-apiserver cbc702ff-f005-4e72-822a-27c70a812c58 1044 0 2025-07-15 11:32:41 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6644dcb798 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6644dcb798-st6rl eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calibc8b11759e5 [] [] }} ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-st6rl" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--st6rl-" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.864 [INFO][3788] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-st6rl" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.904 [INFO][3816] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" HandleID="k8s-pod-network.edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.905 [INFO][3816] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" HandleID="k8s-pod-network.edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00019e460), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6644dcb798-st6rl", "timestamp":"2025-07-15 11:33:12.904874404 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.905 [INFO][3816] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.905 [INFO][3816] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.905 [INFO][3816] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.913 [INFO][3816] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" host="localhost" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.918 [INFO][3816] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.922 [INFO][3816] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.924 [INFO][3816] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.927 [INFO][3816] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.927 [INFO][3816] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" host="localhost" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.929 [INFO][3816] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.934 [INFO][3816] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" host="localhost" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.943 [INFO][3816] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" host="localhost" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.943 [INFO][3816] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" host="localhost" Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.943 [INFO][3816] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:12.964740 env[1206]: 2025-07-15 11:33:12.943 [INFO][3816] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" HandleID="k8s-pod-network.edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.967480 env[1206]: 2025-07-15 11:33:12.944 [INFO][3788] cni-plugin/k8s.go 418: Populated endpoint ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-st6rl" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0", GenerateName:"calico-apiserver-6644dcb798-", Namespace:"calico-apiserver", SelfLink:"", UID:"cbc702ff-f005-4e72-822a-27c70a812c58", ResourceVersion:"1044", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6644dcb798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6644dcb798-st6rl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibc8b11759e5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:12.967480 env[1206]: 2025-07-15 11:33:12.945 [INFO][3788] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-st6rl" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.967480 env[1206]: 2025-07-15 11:33:12.945 [INFO][3788] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibc8b11759e5 ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-st6rl" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.967480 env[1206]: 2025-07-15 11:33:12.951 [INFO][3788] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-st6rl" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.967480 env[1206]: 2025-07-15 11:33:12.952 [INFO][3788] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-st6rl" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0", GenerateName:"calico-apiserver-6644dcb798-", Namespace:"calico-apiserver", SelfLink:"", UID:"cbc702ff-f005-4e72-822a-27c70a812c58", ResourceVersion:"1044", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6644dcb798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f", Pod:"calico-apiserver-6644dcb798-st6rl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibc8b11759e5", MAC:"6e:ea:53:50:07:68", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:12.967480 env[1206]: 2025-07-15 11:33:12.962 [INFO][3788] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f" Namespace="calico-apiserver" Pod="calico-apiserver-6644dcb798-st6rl" WorkloadEndpoint="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:12.984000 audit[3841]: NETFILTER_CFG table=filter:106 family=2 entries=41 op=nft_register_chain pid=3841 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:12.984000 audit[3841]: SYSCALL arch=c000003e syscall=46 success=yes exit=23076 a0=3 a1=7ffd805bfe30 a2=0 a3=7ffd805bfe1c items=0 ppid=3329 pid=3841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.984000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:13.040574 env[1206]: time="2025-07-15T11:33:13.040477304Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:13.040721 env[1206]: time="2025-07-15T11:33:13.040663262Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:13.040721 env[1206]: time="2025-07-15T11:33:13.040705822Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:13.041064 env[1206]: time="2025-07-15T11:33:13.041024560Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f pid=3850 runtime=io.containerd.runc.v2 Jul 15 11:33:13.067936 systemd[1]: Started cri-containerd-edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f.scope. Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.084000 audit: BPF prog-id=170 op=LOAD Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3850 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564636134333834346638633331306261653165336436643931633462 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3850 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564636134333834346638633331306261653165336436643931633462 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit: BPF prog-id=171 op=LOAD Jul 15 11:33:13.085000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001efea0 items=0 ppid=3850 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564636134333834346638633331306261653165336436643931633462 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit: BPF prog-id=172 op=LOAD Jul 15 11:33:13.085000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001efee8 items=0 ppid=3850 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564636134333834346638633331306261653165336436643931633462 Jul 15 11:33:13.085000 audit: BPF prog-id=172 op=UNLOAD Jul 15 11:33:13.085000 audit: BPF prog-id=171 op=UNLOAD Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.085000 audit: BPF prog-id=173 op=LOAD Jul 15 11:33:13.085000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003f02f8 items=0 ppid=3850 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564636134333834346638633331306261653165336436643931633462 Jul 15 11:33:13.087124 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:13.103624 systemd-networkd[1026]: cali76fab65ea4a: Link UP Jul 15 11:33:13.107355 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:33:13.107403 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali76fab65ea4a: link becomes ready Jul 15 11:33:13.107549 systemd-networkd[1026]: cali76fab65ea4a: Gained carrier Jul 15 11:33:13.116786 env[1206]: time="2025-07-15T11:33:13.113883745Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6644dcb798-st6rl,Uid:cbc702ff-f005-4e72-822a-27c70a812c58,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f\"" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:12.881 [INFO][3793] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0 goldmane-58fd7646b9- calico-system c09f3584-588b-4ef0-bea9-18b4680d3787 1045 0 2025-07-15 11:32:44 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-4pzc9 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali76fab65ea4a [] [] }} ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Namespace="calico-system" Pod="goldmane-58fd7646b9-4pzc9" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--4pzc9-" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:12.881 [INFO][3793] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Namespace="calico-system" Pod="goldmane-58fd7646b9-4pzc9" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:12.925 [INFO][3824] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" HandleID="k8s-pod-network.2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:12.926 [INFO][3824] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" HandleID="k8s-pod-network.2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025b260), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-4pzc9", "timestamp":"2025-07-15 11:33:12.92587427 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:12.926 [INFO][3824] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:12.943 [INFO][3824] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:12.943 [INFO][3824] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.013 [INFO][3824] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" host="localhost" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.030 [INFO][3824] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.040 [INFO][3824] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.042 [INFO][3824] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.051 [INFO][3824] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.051 [INFO][3824] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" host="localhost" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.055 [INFO][3824] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469 Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.089 [INFO][3824] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" host="localhost" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.098 [INFO][3824] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" host="localhost" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.098 [INFO][3824] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" host="localhost" Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.098 [INFO][3824] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:13.122560 env[1206]: 2025-07-15 11:33:13.098 [INFO][3824] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" HandleID="k8s-pod-network.2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:13.123202 env[1206]: 2025-07-15 11:33:13.100 [INFO][3793] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Namespace="calico-system" Pod="goldmane-58fd7646b9-4pzc9" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"c09f3584-588b-4ef0-bea9-18b4680d3787", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-4pzc9", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali76fab65ea4a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:13.123202 env[1206]: 2025-07-15 11:33:13.100 [INFO][3793] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Namespace="calico-system" Pod="goldmane-58fd7646b9-4pzc9" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:13.123202 env[1206]: 2025-07-15 11:33:13.100 [INFO][3793] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali76fab65ea4a ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Namespace="calico-system" Pod="goldmane-58fd7646b9-4pzc9" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:13.123202 env[1206]: 2025-07-15 11:33:13.105 [INFO][3793] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Namespace="calico-system" Pod="goldmane-58fd7646b9-4pzc9" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:13.123202 env[1206]: 2025-07-15 11:33:13.109 [INFO][3793] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Namespace="calico-system" Pod="goldmane-58fd7646b9-4pzc9" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"c09f3584-588b-4ef0-bea9-18b4680d3787", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469", Pod:"goldmane-58fd7646b9-4pzc9", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali76fab65ea4a", MAC:"da:12:73:d1:b9:1b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:13.123202 env[1206]: 2025-07-15 11:33:13.120 [INFO][3793] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469" Namespace="calico-system" Pod="goldmane-58fd7646b9-4pzc9" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:13.130263 systemd[1]: run-netns-cni\x2d063d414b\x2d3b72\x2d85e6\x2d323e\x2d84e54e957cf6.mount: Deactivated successfully. Jul 15 11:33:13.138808 env[1206]: time="2025-07-15T11:33:13.138729767Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:13.138808 env[1206]: time="2025-07-15T11:33:13.138776525Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:13.139029 env[1206]: time="2025-07-15T11:33:13.138790601Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:13.139029 env[1206]: time="2025-07-15T11:33:13.138974586Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469 pid=3904 runtime=io.containerd.runc.v2 Jul 15 11:33:13.139000 audit[3905]: NETFILTER_CFG table=filter:107 family=2 entries=52 op=nft_register_chain pid=3905 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:13.139000 audit[3905]: SYSCALL arch=c000003e syscall=46 success=yes exit=27556 a0=3 a1=7ffc07030e70 a2=0 a3=7ffc07030e5c items=0 ppid=3329 pid=3905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.139000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:13.158681 systemd[1]: Started cri-containerd-2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469.scope. Jul 15 11:33:13.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit: BPF prog-id=174 op=LOAD Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3904 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303462636337303930313965613832656464613936613835633661 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3904 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303462636337303930313965613832656464613936613835633661 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit: BPF prog-id=175 op=LOAD Jul 15 11:33:13.166000 audit[3914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ca620 items=0 ppid=3904 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303462636337303930313965613832656464613936613835633661 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit: BPF prog-id=176 op=LOAD Jul 15 11:33:13.166000 audit[3914]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ca668 items=0 ppid=3904 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303462636337303930313965613832656464613936613835633661 Jul 15 11:33:13.166000 audit: BPF prog-id=176 op=UNLOAD Jul 15 11:33:13.166000 audit: BPF prog-id=175 op=UNLOAD Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { perfmon } for pid=3914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit[3914]: AVC avc: denied { bpf } for pid=3914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:13.166000 audit: BPF prog-id=177 op=LOAD Jul 15 11:33:13.166000 audit[3914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003caa78 items=0 ppid=3904 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:13.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237303462636337303930313965613832656464613936613835633661 Jul 15 11:33:13.168213 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:13.189609 env[1206]: time="2025-07-15T11:33:13.189570127Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-4pzc9,Uid:c09f3584-588b-4ef0-bea9-18b4680d3787,Namespace:calico-system,Attempt:1,} returns sandbox id \"2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469\"" Jul 15 11:33:13.708032 env[1206]: time="2025-07-15T11:33:13.707990619Z" level=info msg="StopPodSandbox for \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\"" Jul 15 11:33:13.708365 env[1206]: time="2025-07-15T11:33:13.708328443Z" level=info msg="StopPodSandbox for \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\"" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.742 [INFO][3955] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.743 [INFO][3955] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" iface="eth0" netns="/var/run/netns/cni-e945a726-c86a-9927-200c-1f122de28d60" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.743 [INFO][3955] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" iface="eth0" netns="/var/run/netns/cni-e945a726-c86a-9927-200c-1f122de28d60" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.743 [INFO][3955] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" iface="eth0" netns="/var/run/netns/cni-e945a726-c86a-9927-200c-1f122de28d60" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.743 [INFO][3955] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.743 [INFO][3955] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.767 [INFO][3973] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" HandleID="k8s-pod-network.9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.767 [INFO][3973] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.767 [INFO][3973] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.774 [WARNING][3973] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" HandleID="k8s-pod-network.9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.774 [INFO][3973] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" HandleID="k8s-pod-network.9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.775 [INFO][3973] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:13.780253 env[1206]: 2025-07-15 11:33:13.778 [INFO][3955] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:13.782701 systemd[1]: run-netns-cni\x2de945a726\x2dc86a\x2d9927\x2d200c\x2d1f122de28d60.mount: Deactivated successfully. Jul 15 11:33:13.783065 env[1206]: time="2025-07-15T11:33:13.783022812Z" level=info msg="TearDown network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\" successfully" Jul 15 11:33:13.783065 env[1206]: time="2025-07-15T11:33:13.783061635Z" level=info msg="StopPodSandbox for \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\" returns successfully" Jul 15 11:33:13.783671 env[1206]: time="2025-07-15T11:33:13.783645731Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7dbdfb9cff-bwzbt,Uid:9e21e34f-bad1-42a0-ba75-c6a2aae8541a,Namespace:calico-system,Attempt:1,}" Jul 15 11:33:13.813628 systemd-networkd[1026]: calic5d6ad04a5b: Gained IPv6LL Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.793 [INFO][3967] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.793 [INFO][3967] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" iface="eth0" netns="/var/run/netns/cni-720b95e5-6dd2-a352-97f6-94b8a9d4a084" Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.793 [INFO][3967] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" iface="eth0" netns="/var/run/netns/cni-720b95e5-6dd2-a352-97f6-94b8a9d4a084" Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.793 [INFO][3967] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" iface="eth0" netns="/var/run/netns/cni-720b95e5-6dd2-a352-97f6-94b8a9d4a084" Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.793 [INFO][3967] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.794 [INFO][3967] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.828 [INFO][3985] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" HandleID="k8s-pod-network.d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.828 [INFO][3985] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.828 [INFO][3985] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.835 [WARNING][3985] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" HandleID="k8s-pod-network.d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.835 [INFO][3985] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" HandleID="k8s-pod-network.d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.837 [INFO][3985] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:13.841195 env[1206]: 2025-07-15 11:33:13.839 [INFO][3967] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:13.841619 env[1206]: time="2025-07-15T11:33:13.841404195Z" level=info msg="TearDown network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\" successfully" Jul 15 11:33:13.841619 env[1206]: time="2025-07-15T11:33:13.841447566Z" level=info msg="StopPodSandbox for \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\" returns successfully" Jul 15 11:33:13.842245 kubelet[1944]: E0715 11:33:13.841812 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:13.843424 env[1206]: time="2025-07-15T11:33:13.843388208Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-rdrvp,Uid:761df6db-bbcd-4fe9-80ab-3a95e8a52330,Namespace:kube-system,Attempt:1,}" Jul 15 11:33:14.128164 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2905685654.mount: Deactivated successfully. Jul 15 11:33:14.128285 systemd[1]: run-netns-cni\x2d720b95e5\x2d6dd2\x2da352\x2d97f6\x2d94b8a9d4a084.mount: Deactivated successfully. Jul 15 11:33:14.161379 env[1206]: time="2025-07-15T11:33:14.161325604Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:14.170074 env[1206]: time="2025-07-15T11:33:14.170035801Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:14.176974 env[1206]: time="2025-07-15T11:33:14.176938605Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:14.179747 env[1206]: time="2025-07-15T11:33:14.179695659Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:14.180340 env[1206]: time="2025-07-15T11:33:14.180303490Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 15 11:33:14.182803 env[1206]: time="2025-07-15T11:33:14.182774918Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:33:14.184757 env[1206]: time="2025-07-15T11:33:14.184717033Z" level=info msg="CreateContainer within sandbox \"39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:33:14.204404 env[1206]: time="2025-07-15T11:33:14.204359156Z" level=info msg="CreateContainer within sandbox \"39105f951cb1ec4b2117b807cf69d7bdff0f3a18aa86f0f903db8cd944fac025\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"62c32ee9f8a36afcd8d99d4f781d846e8332814ac948872b83b038bf574ebab4\"" Jul 15 11:33:14.207361 env[1206]: time="2025-07-15T11:33:14.205170257Z" level=info msg="StartContainer for \"62c32ee9f8a36afcd8d99d4f781d846e8332814ac948872b83b038bf574ebab4\"" Jul 15 11:33:14.213284 systemd-networkd[1026]: cali77528cc3fbd: Link UP Jul 15 11:33:14.216265 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:33:14.216308 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali77528cc3fbd: link becomes ready Jul 15 11:33:14.216207 systemd-networkd[1026]: cali77528cc3fbd: Gained carrier Jul 15 11:33:14.229633 systemd[1]: Started cri-containerd-62c32ee9f8a36afcd8d99d4f781d846e8332814ac948872b83b038bf574ebab4.scope. Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit: BPF prog-id=178 op=LOAD Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3469 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632633332656539663861333661666364386439396434663738316438 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3469 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632633332656539663861333661666364386439396434663738316438 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit: BPF prog-id=179 op=LOAD Jul 15 11:33:14.240000 audit[4041]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002e4660 items=0 ppid=3469 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632633332656539663861333661666364386439396434663738316438 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.240000 audit: BPF prog-id=180 op=LOAD Jul 15 11:33:14.240000 audit[4041]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002e46a8 items=0 ppid=3469 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632633332656539663861333661666364386439396434663738316438 Jul 15 11:33:14.241000 audit: BPF prog-id=180 op=UNLOAD Jul 15 11:33:14.241000 audit: BPF prog-id=179 op=UNLOAD Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.241000 audit: BPF prog-id=181 op=LOAD Jul 15 11:33:14.241000 audit[4041]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002e4ab8 items=0 ppid=3469 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632633332656539663861333661666364386439396434663738316438 Jul 15 11:33:14.428296 env[1206]: time="2025-07-15T11:33:14.428178657Z" level=info msg="StartContainer for \"62c32ee9f8a36afcd8d99d4f781d846e8332814ac948872b83b038bf574ebab4\" returns successfully" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:13.838 [INFO][3992] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0 calico-kube-controllers-7dbdfb9cff- calico-system 9e21e34f-bad1-42a0-ba75-c6a2aae8541a 1057 0 2025-07-15 11:32:45 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7dbdfb9cff projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7dbdfb9cff-bwzbt eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali77528cc3fbd [] [] }} ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Namespace="calico-system" Pod="calico-kube-controllers-7dbdfb9cff-bwzbt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:13.841 [INFO][3992] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Namespace="calico-system" Pod="calico-kube-controllers-7dbdfb9cff-bwzbt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.170 [INFO][4008] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" HandleID="k8s-pod-network.9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.170 [INFO][4008] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" HandleID="k8s-pod-network.9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00011a4f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7dbdfb9cff-bwzbt", "timestamp":"2025-07-15 11:33:14.17008886 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.170 [INFO][4008] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.171 [INFO][4008] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.171 [INFO][4008] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.184 [INFO][4008] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" host="localhost" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.187 [INFO][4008] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.191 [INFO][4008] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.192 [INFO][4008] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.194 [INFO][4008] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.195 [INFO][4008] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" host="localhost" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.196 [INFO][4008] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25 Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.200 [INFO][4008] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" host="localhost" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.206 [INFO][4008] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" host="localhost" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.206 [INFO][4008] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" host="localhost" Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.206 [INFO][4008] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:14.433434 env[1206]: 2025-07-15 11:33:14.206 [INFO][4008] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" HandleID="k8s-pod-network.9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:14.434796 env[1206]: 2025-07-15 11:33:14.211 [INFO][3992] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Namespace="calico-system" Pod="calico-kube-controllers-7dbdfb9cff-bwzbt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0", GenerateName:"calico-kube-controllers-7dbdfb9cff-", Namespace:"calico-system", SelfLink:"", UID:"9e21e34f-bad1-42a0-ba75-c6a2aae8541a", ResourceVersion:"1057", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7dbdfb9cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7dbdfb9cff-bwzbt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali77528cc3fbd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:14.434796 env[1206]: 2025-07-15 11:33:14.211 [INFO][3992] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Namespace="calico-system" Pod="calico-kube-controllers-7dbdfb9cff-bwzbt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:14.434796 env[1206]: 2025-07-15 11:33:14.211 [INFO][3992] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali77528cc3fbd ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Namespace="calico-system" Pod="calico-kube-controllers-7dbdfb9cff-bwzbt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:14.434796 env[1206]: 2025-07-15 11:33:14.216 [INFO][3992] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Namespace="calico-system" Pod="calico-kube-controllers-7dbdfb9cff-bwzbt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:14.434796 env[1206]: 2025-07-15 11:33:14.217 [INFO][3992] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Namespace="calico-system" Pod="calico-kube-controllers-7dbdfb9cff-bwzbt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0", GenerateName:"calico-kube-controllers-7dbdfb9cff-", Namespace:"calico-system", SelfLink:"", UID:"9e21e34f-bad1-42a0-ba75-c6a2aae8541a", ResourceVersion:"1057", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7dbdfb9cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25", Pod:"calico-kube-controllers-7dbdfb9cff-bwzbt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali77528cc3fbd", MAC:"02:e3:0d:31:5b:5b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:14.434796 env[1206]: 2025-07-15 11:33:14.431 [INFO][3992] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25" Namespace="calico-system" Pod="calico-kube-controllers-7dbdfb9cff-bwzbt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:14.444000 audit[4085]: NETFILTER_CFG table=filter:108 family=2 entries=54 op=nft_register_chain pid=4085 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:14.444000 audit[4085]: SYSCALL arch=c000003e syscall=46 success=yes exit=25992 a0=3 a1=7ffc774afc20 a2=0 a3=7ffc774afc0c items=0 ppid=3329 pid=4085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.444000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:14.451806 env[1206]: time="2025-07-15T11:33:14.451743863Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:14.452701 env[1206]: time="2025-07-15T11:33:14.451785961Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:14.452701 env[1206]: time="2025-07-15T11:33:14.451796371Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:14.452701 env[1206]: time="2025-07-15T11:33:14.451991127Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25 pid=4092 runtime=io.containerd.runc.v2 Jul 15 11:33:14.463223 systemd[1]: Started cri-containerd-9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25.scope. Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.475000 audit: BPF prog-id=182 op=LOAD Jul 15 11:33:14.476000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.476000 audit[4102]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4092 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961663638393563616332316337376138323534633865396531336335 Jul 15 11:33:14.476000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.476000 audit[4102]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4092 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961663638393563616332316337376138323534633865396531336335 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit: BPF prog-id=183 op=LOAD Jul 15 11:33:14.477000 audit[4102]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003a5700 items=0 ppid=4092 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961663638393563616332316337376138323534633865396531336335 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit: BPF prog-id=184 op=LOAD Jul 15 11:33:14.477000 audit[4102]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003a5748 items=0 ppid=4092 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961663638393563616332316337376138323534633865396531336335 Jul 15 11:33:14.477000 audit: BPF prog-id=184 op=UNLOAD Jul 15 11:33:14.477000 audit: BPF prog-id=183 op=UNLOAD Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { perfmon } for pid=4102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit[4102]: AVC avc: denied { bpf } for pid=4102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.477000 audit: BPF prog-id=185 op=LOAD Jul 15 11:33:14.477000 audit[4102]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003a5b58 items=0 ppid=4092 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961663638393563616332316337376138323534633865396531336335 Jul 15 11:33:14.478849 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:14.501647 env[1206]: time="2025-07-15T11:33:14.501596311Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7dbdfb9cff-bwzbt,Uid:9e21e34f-bad1-42a0-ba75-c6a2aae8541a,Namespace:calico-system,Attempt:1,} returns sandbox id \"9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25\"" Jul 15 11:33:14.506490 systemd-networkd[1026]: cali151b39d356e: Link UP Jul 15 11:33:14.508406 systemd-networkd[1026]: cali151b39d356e: Gained carrier Jul 15 11:33:14.508853 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali151b39d356e: link becomes ready Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.220 [INFO][4016] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0 coredns-7c65d6cfc9- kube-system 761df6db-bbcd-4fe9-80ab-3a95e8a52330 1058 0 2025-07-15 11:32:31 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-rdrvp eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali151b39d356e [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rdrvp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rdrvp-" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.220 [INFO][4016] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rdrvp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.459 [INFO][4078] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" HandleID="k8s-pod-network.955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.459 [INFO][4078] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" HandleID="k8s-pod-network.955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00035f5f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-rdrvp", "timestamp":"2025-07-15 11:33:14.459093455 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.459 [INFO][4078] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.459 [INFO][4078] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.459 [INFO][4078] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.467 [INFO][4078] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" host="localhost" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.470 [INFO][4078] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.474 [INFO][4078] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.476 [INFO][4078] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.483 [INFO][4078] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.483 [INFO][4078] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" host="localhost" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.484 [INFO][4078] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.487 [INFO][4078] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" host="localhost" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.496 [INFO][4078] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" host="localhost" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.496 [INFO][4078] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" host="localhost" Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.496 [INFO][4078] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:14.521255 env[1206]: 2025-07-15 11:33:14.496 [INFO][4078] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" HandleID="k8s-pod-network.955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:14.521764 env[1206]: 2025-07-15 11:33:14.502 [INFO][4016] cni-plugin/k8s.go 418: Populated endpoint ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rdrvp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"761df6db-bbcd-4fe9-80ab-3a95e8a52330", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-rdrvp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali151b39d356e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:14.521764 env[1206]: 2025-07-15 11:33:14.502 [INFO][4016] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rdrvp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:14.521764 env[1206]: 2025-07-15 11:33:14.502 [INFO][4016] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali151b39d356e ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rdrvp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:14.521764 env[1206]: 2025-07-15 11:33:14.508 [INFO][4016] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rdrvp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:14.521764 env[1206]: 2025-07-15 11:33:14.509 [INFO][4016] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rdrvp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"761df6db-bbcd-4fe9-80ab-3a95e8a52330", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d", Pod:"coredns-7c65d6cfc9-rdrvp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali151b39d356e", MAC:"c6:d0:c0:e5:9a:3a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:14.521764 env[1206]: 2025-07-15 11:33:14.517 [INFO][4016] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rdrvp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:14.531043 env[1206]: time="2025-07-15T11:33:14.530957303Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:14.531104 env[1206]: time="2025-07-15T11:33:14.531063602Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:14.531104 env[1206]: time="2025-07-15T11:33:14.531092887Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:14.531360 env[1206]: time="2025-07-15T11:33:14.531332346Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d pid=4145 runtime=io.containerd.runc.v2 Jul 15 11:33:14.533000 audit[4154]: NETFILTER_CFG table=filter:109 family=2 entries=54 op=nft_register_chain pid=4154 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:14.533000 audit[4154]: SYSCALL arch=c000003e syscall=46 success=yes exit=26100 a0=3 a1=7ffc2cf49590 a2=0 a3=7ffc2cf4957c items=0 ppid=3329 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.533000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:14.540522 systemd[1]: Started cri-containerd-955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d.scope. Jul 15 11:33:14.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit: BPF prog-id=186 op=LOAD Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4145 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353334326362316437353138396230343037393937336664306264 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4145 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353334326362316437353138396230343037393937336664306264 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit: BPF prog-id=187 op=LOAD Jul 15 11:33:14.550000 audit[4157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000ddce0 items=0 ppid=4145 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353334326362316437353138396230343037393937336664306264 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit: BPF prog-id=188 op=LOAD Jul 15 11:33:14.550000 audit[4157]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000ddd28 items=0 ppid=4145 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353334326362316437353138396230343037393937336664306264 Jul 15 11:33:14.550000 audit: BPF prog-id=188 op=UNLOAD Jul 15 11:33:14.550000 audit: BPF prog-id=187 op=UNLOAD Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.550000 audit: BPF prog-id=189 op=LOAD Jul 15 11:33:14.550000 audit[4157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e0138 items=0 ppid=4145 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353334326362316437353138396230343037393937336664306264 Jul 15 11:33:14.552330 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:14.573275 env[1206]: time="2025-07-15T11:33:14.573238903Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-rdrvp,Uid:761df6db-bbcd-4fe9-80ab-3a95e8a52330,Namespace:kube-system,Attempt:1,} returns sandbox id \"955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d\"" Jul 15 11:33:14.574137 kubelet[1944]: E0715 11:33:14.574114 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:14.576070 env[1206]: time="2025-07-15T11:33:14.575785702Z" level=info msg="CreateContainer within sandbox \"955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:33:14.580982 systemd-networkd[1026]: calibc8b11759e5: Gained IPv6LL Jul 15 11:33:14.594373 env[1206]: time="2025-07-15T11:33:14.594310638Z" level=info msg="CreateContainer within sandbox \"955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"e052415db7352c4d76e2b48826549ceac6be25fad903b9969527c01ea9bea852\"" Jul 15 11:33:14.595011 env[1206]: time="2025-07-15T11:33:14.594969645Z" level=info msg="StartContainer for \"e052415db7352c4d76e2b48826549ceac6be25fad903b9969527c01ea9bea852\"" Jul 15 11:33:14.608486 systemd[1]: Started cri-containerd-e052415db7352c4d76e2b48826549ceac6be25fad903b9969527c01ea9bea852.scope. Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit: BPF prog-id=190 op=LOAD Jul 15 11:33:14.620000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.620000 audit[4188]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4145 pid=4188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353234313564623733353263346437366532623438383236353439 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4145 pid=4188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353234313564623733353263346437366532623438383236353439 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit: BPF prog-id=191 op=LOAD Jul 15 11:33:14.621000 audit[4188]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000212960 items=0 ppid=4145 pid=4188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353234313564623733353263346437366532623438383236353439 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit: BPF prog-id=192 op=LOAD Jul 15 11:33:14.621000 audit[4188]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002129a8 items=0 ppid=4145 pid=4188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353234313564623733353263346437366532623438383236353439 Jul 15 11:33:14.621000 audit: BPF prog-id=192 op=UNLOAD Jul 15 11:33:14.621000 audit: BPF prog-id=191 op=UNLOAD Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { perfmon } for pid=4188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit[4188]: AVC avc: denied { bpf } for pid=4188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.621000 audit: BPF prog-id=193 op=LOAD Jul 15 11:33:14.621000 audit[4188]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000212db8 items=0 ppid=4145 pid=4188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353234313564623733353263346437366532623438383236353439 Jul 15 11:33:14.633047 env[1206]: time="2025-07-15T11:33:14.633000587Z" level=info msg="StartContainer for \"e052415db7352c4d76e2b48826549ceac6be25fad903b9969527c01ea9bea852\" returns successfully" Jul 15 11:33:14.695000 audit[4199]: AVC avc: denied { getattr } for pid=4199 comm="coredns" path="cgroup:[4026532374]" dev="nsfs" ino=4026532374 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c178 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:33:14.695000 audit[4199]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0000fca50 a2=c0004a7078 a3=0 items=0 ppid=4145 pid=4199 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c178 key=(null) Jul 15 11:33:14.695000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:33:14.708547 env[1206]: time="2025-07-15T11:33:14.708498675Z" level=info msg="StopPodSandbox for \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\"" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.745 [INFO][4230] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.745 [INFO][4230] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" iface="eth0" netns="/var/run/netns/cni-a4881733-4c2a-27e2-c3de-7100ed993117" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.745 [INFO][4230] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" iface="eth0" netns="/var/run/netns/cni-a4881733-4c2a-27e2-c3de-7100ed993117" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.745 [INFO][4230] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" iface="eth0" netns="/var/run/netns/cni-a4881733-4c2a-27e2-c3de-7100ed993117" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.745 [INFO][4230] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.745 [INFO][4230] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.772 [INFO][4240] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" HandleID="k8s-pod-network.b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.772 [INFO][4240] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.772 [INFO][4240] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.777 [WARNING][4240] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" HandleID="k8s-pod-network.b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.777 [INFO][4240] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" HandleID="k8s-pod-network.b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.778 [INFO][4240] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:14.782398 env[1206]: 2025-07-15 11:33:14.780 [INFO][4230] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:14.783441 env[1206]: time="2025-07-15T11:33:14.782576197Z" level=info msg="TearDown network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\" successfully" Jul 15 11:33:14.783441 env[1206]: time="2025-07-15T11:33:14.782605762Z" level=info msg="StopPodSandbox for \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\" returns successfully" Jul 15 11:33:14.783494 kubelet[1944]: E0715 11:33:14.782947 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:14.783663 env[1206]: time="2025-07-15T11:33:14.783628101Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gmfkp,Uid:477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9,Namespace:kube-system,Attempt:1,}" Jul 15 11:33:14.924017 systemd-networkd[1026]: calibcbb57de92d: Link UP Jul 15 11:33:14.926850 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibcbb57de92d: link becomes ready Jul 15 11:33:14.927018 systemd-networkd[1026]: calibcbb57de92d: Gained carrier Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.865 [INFO][4249] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0 coredns-7c65d6cfc9- kube-system 477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9 1080 0 2025-07-15 11:32:31 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-gmfkp eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calibcbb57de92d [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gmfkp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gmfkp-" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.865 [INFO][4249] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gmfkp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.886 [INFO][4269] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" HandleID="k8s-pod-network.64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.886 [INFO][4269] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" HandleID="k8s-pod-network.64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001396a0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-gmfkp", "timestamp":"2025-07-15 11:33:14.88648359 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.886 [INFO][4269] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.886 [INFO][4269] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.886 [INFO][4269] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.893 [INFO][4269] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" host="localhost" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.898 [INFO][4269] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.902 [INFO][4269] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.904 [INFO][4269] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.906 [INFO][4269] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.906 [INFO][4269] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" host="localhost" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.908 [INFO][4269] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.911 [INFO][4269] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" host="localhost" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.917 [INFO][4269] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" host="localhost" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.918 [INFO][4269] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" host="localhost" Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.918 [INFO][4269] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:14.939411 env[1206]: 2025-07-15 11:33:14.919 [INFO][4269] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" HandleID="k8s-pod-network.64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.942254 env[1206]: 2025-07-15 11:33:14.920 [INFO][4249] cni-plugin/k8s.go 418: Populated endpoint ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gmfkp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-gmfkp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibcbb57de92d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:14.942254 env[1206]: 2025-07-15 11:33:14.920 [INFO][4249] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gmfkp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.942254 env[1206]: 2025-07-15 11:33:14.920 [INFO][4249] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibcbb57de92d ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gmfkp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.942254 env[1206]: 2025-07-15 11:33:14.926 [INFO][4249] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gmfkp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.942254 env[1206]: 2025-07-15 11:33:14.926 [INFO][4249] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gmfkp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb", Pod:"coredns-7c65d6cfc9-gmfkp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibcbb57de92d", MAC:"e6:43:09:3f:f3:44", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:14.942254 env[1206]: 2025-07-15 11:33:14.936 [INFO][4249] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gmfkp" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:14.951000 audit[4287]: NETFILTER_CFG table=filter:110 family=2 entries=54 op=nft_register_chain pid=4287 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:14.951000 audit[4287]: SYSCALL arch=c000003e syscall=46 success=yes exit=25556 a0=3 a1=7ffc72614980 a2=0 a3=7ffc7261496c items=0 ppid=3329 pid=4287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.951000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:14.965979 systemd-networkd[1026]: cali76fab65ea4a: Gained IPv6LL Jul 15 11:33:15.053783 kubelet[1944]: E0715 11:33:15.053738 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:15.130652 systemd[1]: run-netns-cni\x2da4881733\x2d4c2a\x2d27e2\x2dc3de\x2d7100ed993117.mount: Deactivated successfully. Jul 15 11:33:15.164618 env[1206]: time="2025-07-15T11:33:15.164420473Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:15.164618 env[1206]: time="2025-07-15T11:33:15.164478312Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:15.164618 env[1206]: time="2025-07-15T11:33:15.164491136Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:15.167697 env[1206]: time="2025-07-15T11:33:15.167240335Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb pid=4295 runtime=io.containerd.runc.v2 Jul 15 11:33:15.186218 kubelet[1944]: I0715 11:33:15.185948 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-77b7984545-k2wxb" podStartSLOduration=1.621732079 podStartE2EDuration="6.185934205s" podCreationTimestamp="2025-07-15 11:33:09 +0000 UTC" firstStartedPulling="2025-07-15 11:33:09.617737444 +0000 UTC m=+44.991881578" lastFinishedPulling="2025-07-15 11:33:14.18193956 +0000 UTC m=+49.556083704" observedRunningTime="2025-07-15 11:33:15.156128783 +0000 UTC m=+50.530272937" watchObservedRunningTime="2025-07-15 11:33:15.185934205 +0000 UTC m=+50.560078349" Jul 15 11:33:15.186218 kubelet[1944]: I0715 11:33:15.186118 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-rdrvp" podStartSLOduration=44.186114413 podStartE2EDuration="44.186114413s" podCreationTimestamp="2025-07-15 11:32:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:33:15.185556306 +0000 UTC m=+50.559700450" watchObservedRunningTime="2025-07-15 11:33:15.186114413 +0000 UTC m=+50.560258557" Jul 15 11:33:15.193621 systemd[1]: Started cri-containerd-64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb.scope. Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.203000 audit: BPF prog-id=194 op=LOAD Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=4295 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634623537386538343064333636616265343963646236336463383365 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=4295 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634623537386538343064333636616265343963646236336463383365 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit: BPF prog-id=195 op=LOAD Jul 15 11:33:15.204000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0000242b0 items=0 ppid=4295 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634623537386538343064333636616265343963646236336463383365 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit: BPF prog-id=196 op=LOAD Jul 15 11:33:15.204000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0000242f8 items=0 ppid=4295 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634623537386538343064333636616265343963646236336463383365 Jul 15 11:33:15.204000 audit: BPF prog-id=196 op=UNLOAD Jul 15 11:33:15.204000 audit: BPF prog-id=195 op=UNLOAD Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.204000 audit: BPF prog-id=197 op=LOAD Jul 15 11:33:15.204000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c000024708 items=0 ppid=4295 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634623537386538343064333636616265343963646236336463383365 Jul 15 11:33:15.206172 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:15.206000 audit[4322]: NETFILTER_CFG table=filter:111 family=2 entries=19 op=nft_register_rule pid=4322 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:15.206000 audit[4322]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff9a13aa70 a2=0 a3=7fff9a13aa5c items=0 ppid=2094 pid=4322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.206000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:15.216000 audit[4322]: NETFILTER_CFG table=nat:112 family=2 entries=21 op=nft_register_chain pid=4322 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:15.216000 audit[4322]: SYSCALL arch=c000003e syscall=46 success=yes exit=7044 a0=3 a1=7fff9a13aa70 a2=0 a3=7fff9a13aa5c items=0 ppid=2094 pid=4322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.216000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:15.229043 env[1206]: time="2025-07-15T11:33:15.229002536Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gmfkp,Uid:477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9,Namespace:kube-system,Attempt:1,} returns sandbox id \"64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb\"" Jul 15 11:33:15.229000 audit[4331]: NETFILTER_CFG table=filter:113 family=2 entries=15 op=nft_register_rule pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:15.229000 audit[4331]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffb0c31ac0 a2=0 a3=7fffb0c31aac items=0 ppid=2094 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:15.231217 kubelet[1944]: E0715 11:33:15.231182 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:15.233241 env[1206]: time="2025-07-15T11:33:15.233210073Z" level=info msg="CreateContainer within sandbox \"64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:33:15.235000 audit[4331]: NETFILTER_CFG table=nat:114 family=2 entries=37 op=nft_register_chain pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:15.235000 audit[4331]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7fffb0c31ac0 a2=0 a3=7fffb0c31aac items=0 ppid=2094 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.235000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:15.246108 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1190145463.mount: Deactivated successfully. Jul 15 11:33:15.248433 env[1206]: time="2025-07-15T11:33:15.248390610Z" level=info msg="CreateContainer within sandbox \"64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"18fdc8ee348cdaf3156fb6db626f79976784887bb0e196391c2ad69cb672cb0d\"" Jul 15 11:33:15.248880 env[1206]: time="2025-07-15T11:33:15.248857045Z" level=info msg="StartContainer for \"18fdc8ee348cdaf3156fb6db626f79976784887bb0e196391c2ad69cb672cb0d\"" Jul 15 11:33:15.265124 systemd[1]: Started cri-containerd-18fdc8ee348cdaf3156fb6db626f79976784887bb0e196391c2ad69cb672cb0d.scope. Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit: BPF prog-id=198 op=LOAD Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4295 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138666463386565333438636461663331353666623664623632366637 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4295 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138666463386565333438636461663331353666623664623632366637 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit: BPF prog-id=199 op=LOAD Jul 15 11:33:15.274000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ed1c0 items=0 ppid=4295 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138666463386565333438636461663331353666623664623632366637 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit: BPF prog-id=200 op=LOAD Jul 15 11:33:15.274000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001ed208 items=0 ppid=4295 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138666463386565333438636461663331353666623664623632366637 Jul 15 11:33:15.274000 audit: BPF prog-id=200 op=UNLOAD Jul 15 11:33:15.274000 audit: BPF prog-id=199 op=UNLOAD Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:15.274000 audit: BPF prog-id=201 op=LOAD Jul 15 11:33:15.274000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001ed618 items=0 ppid=4295 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:15.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138666463386565333438636461663331353666623664623632366637 Jul 15 11:33:15.286807 env[1206]: time="2025-07-15T11:33:15.286768308Z" level=info msg="StartContainer for \"18fdc8ee348cdaf3156fb6db626f79976784887bb0e196391c2ad69cb672cb0d\" returns successfully" Jul 15 11:33:15.296000 audit[4352]: AVC avc: denied { getattr } for pid=4352 comm="coredns" path="cgroup:[4026532438]" dev="nsfs" ino=4026532438 scontext=system_u:system_r:svirt_lxc_net_t:s0:c492,c592 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:33:15.296000 audit[4352]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0005767f8 a2=c00057aac8 a3=0 items=0 ppid=4295 pid=4352 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c492,c592 key=(null) Jul 15 11:33:15.296000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:33:15.708491 env[1206]: time="2025-07-15T11:33:15.708445657Z" level=info msg="StopPodSandbox for \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\"" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.759 [INFO][4385] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.761 [INFO][4385] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" iface="eth0" netns="/var/run/netns/cni-c53b1be8-f27a-388d-60b6-e5bccfb3c126" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.761 [INFO][4385] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" iface="eth0" netns="/var/run/netns/cni-c53b1be8-f27a-388d-60b6-e5bccfb3c126" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.761 [INFO][4385] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" iface="eth0" netns="/var/run/netns/cni-c53b1be8-f27a-388d-60b6-e5bccfb3c126" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.761 [INFO][4385] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.762 [INFO][4385] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.792 [INFO][4393] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" HandleID="k8s-pod-network.d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.792 [INFO][4393] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.792 [INFO][4393] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.802 [WARNING][4393] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" HandleID="k8s-pod-network.d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.802 [INFO][4393] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" HandleID="k8s-pod-network.d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.804 [INFO][4393] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:15.807788 env[1206]: 2025-07-15 11:33:15.806 [INFO][4385] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:15.808668 env[1206]: time="2025-07-15T11:33:15.808123369Z" level=info msg="TearDown network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\" successfully" Jul 15 11:33:15.808668 env[1206]: time="2025-07-15T11:33:15.808162854Z" level=info msg="StopPodSandbox for \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\" returns successfully" Jul 15 11:33:15.808923 env[1206]: time="2025-07-15T11:33:15.808887603Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-92bfv,Uid:f4300a85-d6b1-4be7-b787-3060531fee25,Namespace:calico-system,Attempt:1,}" Jul 15 11:33:16.058426 kubelet[1944]: E0715 11:33:16.057778 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:16.058426 kubelet[1944]: E0715 11:33:16.058016 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:16.080458 kubelet[1944]: I0715 11:33:16.080394 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-gmfkp" podStartSLOduration=45.080376924 podStartE2EDuration="45.080376924s" podCreationTimestamp="2025-07-15 11:32:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:33:16.079907813 +0000 UTC m=+51.454051957" watchObservedRunningTime="2025-07-15 11:33:16.080376924 +0000 UTC m=+51.454521068" Jul 15 11:33:16.132903 systemd[1]: run-netns-cni\x2dc53b1be8\x2df27a\x2d388d\x2d60b6\x2de5bccfb3c126.mount: Deactivated successfully. Jul 15 11:33:16.181098 systemd-networkd[1026]: cali77528cc3fbd: Gained IPv6LL Jul 15 11:33:16.181362 systemd-networkd[1026]: calibcbb57de92d: Gained IPv6LL Jul 15 11:33:16.188662 systemd-networkd[1026]: cali952419ac96d: Link UP Jul 15 11:33:16.189860 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:33:16.190018 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali952419ac96d: link becomes ready Jul 15 11:33:16.191232 systemd-networkd[1026]: cali952419ac96d: Gained carrier Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.118 [INFO][4401] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--92bfv-eth0 csi-node-driver- calico-system f4300a85-d6b1-4be7-b787-3060531fee25 1103 0 2025-07-15 11:32:44 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-92bfv eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali952419ac96d [] [] }} ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Namespace="calico-system" Pod="csi-node-driver-92bfv" WorkloadEndpoint="localhost-k8s-csi--node--driver--92bfv-" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.118 [INFO][4401] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Namespace="calico-system" Pod="csi-node-driver-92bfv" WorkloadEndpoint="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.145 [INFO][4416] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" HandleID="k8s-pod-network.a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.145 [INFO][4416] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" HandleID="k8s-pod-network.a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00032d4d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-92bfv", "timestamp":"2025-07-15 11:33:16.145592898 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.145 [INFO][4416] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.145 [INFO][4416] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.145 [INFO][4416] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.151 [INFO][4416] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" host="localhost" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.155 [INFO][4416] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.163 [INFO][4416] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.164 [INFO][4416] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.166 [INFO][4416] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.166 [INFO][4416] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" host="localhost" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.169 [INFO][4416] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.173 [INFO][4416] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" host="localhost" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.179 [INFO][4416] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" host="localhost" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.179 [INFO][4416] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" host="localhost" Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.179 [INFO][4416] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:16.206773 env[1206]: 2025-07-15 11:33:16.179 [INFO][4416] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" HandleID="k8s-pod-network.a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:16.207385 env[1206]: 2025-07-15 11:33:16.186 [INFO][4401] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Namespace="calico-system" Pod="csi-node-driver-92bfv" WorkloadEndpoint="localhost-k8s-csi--node--driver--92bfv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--92bfv-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"f4300a85-d6b1-4be7-b787-3060531fee25", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-92bfv", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali952419ac96d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:16.207385 env[1206]: 2025-07-15 11:33:16.186 [INFO][4401] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Namespace="calico-system" Pod="csi-node-driver-92bfv" WorkloadEndpoint="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:16.207385 env[1206]: 2025-07-15 11:33:16.186 [INFO][4401] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali952419ac96d ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Namespace="calico-system" Pod="csi-node-driver-92bfv" WorkloadEndpoint="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:16.207385 env[1206]: 2025-07-15 11:33:16.192 [INFO][4401] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Namespace="calico-system" Pod="csi-node-driver-92bfv" WorkloadEndpoint="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:16.207385 env[1206]: 2025-07-15 11:33:16.193 [INFO][4401] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Namespace="calico-system" Pod="csi-node-driver-92bfv" WorkloadEndpoint="localhost-k8s-csi--node--driver--92bfv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--92bfv-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"f4300a85-d6b1-4be7-b787-3060531fee25", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b", Pod:"csi-node-driver-92bfv", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali952419ac96d", MAC:"e6:7b:4c:c1:10:ac", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:16.207385 env[1206]: 2025-07-15 11:33:16.204 [INFO][4401] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b" Namespace="calico-system" Pod="csi-node-driver-92bfv" WorkloadEndpoint="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:16.213000 audit[4439]: NETFILTER_CFG table=filter:115 family=2 entries=52 op=nft_register_chain pid=4439 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:16.217974 kernel: kauditd_printk_skb: 610 callbacks suppressed Jul 15 11:33:16.218029 kernel: audit: type=1325 audit(1752579196.213:1333): table=filter:115 family=2 entries=52 op=nft_register_chain pid=4439 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:16.218052 kernel: audit: type=1300 audit(1752579196.213:1333): arch=c000003e syscall=46 success=yes exit=24296 a0=3 a1=7ffd10b5dee0 a2=0 a3=7ffd10b5decc items=0 ppid=3329 pid=4439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.213000 audit[4439]: SYSCALL arch=c000003e syscall=46 success=yes exit=24296 a0=3 a1=7ffd10b5dee0 a2=0 a3=7ffd10b5decc items=0 ppid=3329 pid=4439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.220666 env[1206]: time="2025-07-15T11:33:16.220597982Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:16.220666 env[1206]: time="2025-07-15T11:33:16.220639540Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:16.220666 env[1206]: time="2025-07-15T11:33:16.220649348Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:16.213000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:16.225023 kernel: audit: type=1327 audit(1752579196.213:1333): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:16.227060 env[1206]: time="2025-07-15T11:33:16.221966901Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b pid=4444 runtime=io.containerd.runc.v2 Jul 15 11:33:16.241229 systemd[1]: Started cri-containerd-a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b.scope. Jul 15 11:33:16.245221 systemd-networkd[1026]: cali151b39d356e: Gained IPv6LL Jul 15 11:33:16.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.285499 kernel: audit: type=1400 audit(1752579196.248:1334): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.285560 kernel: audit: type=1400 audit(1752579196.248:1335): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.288365 kernel: audit: type=1400 audit(1752579196.249:1336): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.291475 kernel: audit: type=1400 audit(1752579196.249:1337): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.294432 kernel: audit: type=1400 audit(1752579196.249:1338): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.297409 kernel: audit: type=1400 audit(1752579196.249:1339): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.297362 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:16.300507 kernel: audit: type=1400 audit(1752579196.249:1340): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.281000 audit: BPF prog-id=202 op=LOAD Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4444 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137636530383537343431653563633766373762386666666563323737 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4444 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137636530383537343431653563633766373762386666666563323737 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.282000 audit: BPF prog-id=203 op=LOAD Jul 15 11:33:16.282000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003401c0 items=0 ppid=4444 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137636530383537343431653563633766373762386666666563323737 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit: BPF prog-id=204 op=LOAD Jul 15 11:33:16.287000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000340208 items=0 ppid=4444 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137636530383537343431653563633766373762386666666563323737 Jul 15 11:33:16.287000 audit: BPF prog-id=204 op=UNLOAD Jul 15 11:33:16.287000 audit: BPF prog-id=203 op=UNLOAD Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:16.287000 audit: BPF prog-id=205 op=LOAD Jul 15 11:33:16.287000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000340618 items=0 ppid=4444 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137636530383537343431653563633766373762386666666563323737 Jul 15 11:33:16.308423 env[1206]: time="2025-07-15T11:33:16.308346377Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-92bfv,Uid:f4300a85-d6b1-4be7-b787-3060531fee25,Namespace:calico-system,Attempt:1,} returns sandbox id \"a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b\"" Jul 15 11:33:16.420000 audit[4479]: NETFILTER_CFG table=filter:116 family=2 entries=12 op=nft_register_rule pid=4479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:16.420000 audit[4479]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffff0b63a70 a2=0 a3=7ffff0b63a5c items=0 ppid=2094 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.420000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:16.472000 audit[4479]: NETFILTER_CFG table=nat:117 family=2 entries=58 op=nft_register_chain pid=4479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:16.472000 audit[4479]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffff0b63a70 a2=0 a3=7ffff0b63a5c items=0 ppid=2094 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.472000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:16.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.85:22-10.0.0.1:38798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:16.710798 systemd[1]: Started sshd@9-10.0.0.85:22-10.0.0.1:38798.service. Jul 15 11:33:16.750000 audit[4482]: USER_ACCT pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:16.751652 sshd[4482]: Accepted publickey for core from 10.0.0.1 port 38798 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:16.751000 audit[4482]: CRED_ACQ pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:16.751000 audit[4482]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbcce9b10 a2=3 a3=0 items=0 ppid=1 pid=4482 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:16.751000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:16.752690 sshd[4482]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:16.756375 systemd-logind[1195]: New session 10 of user core. Jul 15 11:33:16.757155 systemd[1]: Started session-10.scope. Jul 15 11:33:16.760000 audit[4482]: USER_START pid=4482 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:16.761000 audit[4484]: CRED_ACQ pid=4484 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:17.061049 kubelet[1944]: E0715 11:33:17.060954 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:17.061410 kubelet[1944]: E0715 11:33:17.061382 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:17.268908 env[1206]: time="2025-07-15T11:33:17.268860036Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.270638 env[1206]: time="2025-07-15T11:33:17.270594481Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.272423 env[1206]: time="2025-07-15T11:33:17.272384800Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.274080 env[1206]: time="2025-07-15T11:33:17.273967699Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.274483 env[1206]: time="2025-07-15T11:33:17.274445165Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:33:17.276189 env[1206]: time="2025-07-15T11:33:17.276161526Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:33:17.277189 env[1206]: time="2025-07-15T11:33:17.277156473Z" level=info msg="CreateContainer within sandbox \"62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:33:17.285465 sshd[4482]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:17.285000 audit[4482]: USER_END pid=4482 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:17.285000 audit[4482]: CRED_DISP pid=4482 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:17.289192 systemd[1]: sshd@9-10.0.0.85:22-10.0.0.1:38798.service: Deactivated successfully. Jul 15 11:33:17.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.85:22-10.0.0.1:38798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:17.289773 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:33:17.292079 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3987926474.mount: Deactivated successfully. Jul 15 11:33:17.292889 systemd-logind[1195]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:33:17.293716 systemd-logind[1195]: Removed session 10. Jul 15 11:33:17.295468 env[1206]: time="2025-07-15T11:33:17.295415523Z" level=info msg="CreateContainer within sandbox \"62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"fc62543aa701e110a6e47658a75d70c275365892b65618f11693b845544cd7ef\"" Jul 15 11:33:17.296088 env[1206]: time="2025-07-15T11:33:17.296066174Z" level=info msg="StartContainer for \"fc62543aa701e110a6e47658a75d70c275365892b65618f11693b845544cd7ef\"" Jul 15 11:33:17.323636 systemd[1]: Started cri-containerd-fc62543aa701e110a6e47658a75d70c275365892b65618f11693b845544cd7ef.scope. Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit: BPF prog-id=206 op=LOAD Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3700 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663363235343361613730316531313061366534373635386137356437 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3700 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663363235343361613730316531313061366534373635386137356437 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit: BPF prog-id=207 op=LOAD Jul 15 11:33:17.338000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000448ea0 items=0 ppid=3700 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663363235343361613730316531313061366534373635386137356437 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit: BPF prog-id=208 op=LOAD Jul 15 11:33:17.338000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000448ee8 items=0 ppid=3700 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663363235343361613730316531313061366534373635386137356437 Jul 15 11:33:17.338000 audit: BPF prog-id=208 op=UNLOAD Jul 15 11:33:17.338000 audit: BPF prog-id=207 op=UNLOAD Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.338000 audit: BPF prog-id=209 op=LOAD Jul 15 11:33:17.338000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0004492f8 items=0 ppid=3700 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663363235343361613730316531313061366534373635386137356437 Jul 15 11:33:17.515942 env[1206]: time="2025-07-15T11:33:17.515880190Z" level=info msg="StartContainer for \"fc62543aa701e110a6e47658a75d70c275365892b65618f11693b845544cd7ef\" returns successfully" Jul 15 11:33:17.754469 env[1206]: time="2025-07-15T11:33:17.754411846Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.756091 env[1206]: time="2025-07-15T11:33:17.756042887Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.757482 env[1206]: time="2025-07-15T11:33:17.757458303Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.758998 env[1206]: time="2025-07-15T11:33:17.758966242Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.759374 env[1206]: time="2025-07-15T11:33:17.759345764Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:33:17.760871 env[1206]: time="2025-07-15T11:33:17.760651945Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:33:17.761881 env[1206]: time="2025-07-15T11:33:17.761853249Z" level=info msg="CreateContainer within sandbox \"edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:33:17.857109 env[1206]: time="2025-07-15T11:33:17.857066491Z" level=info msg="CreateContainer within sandbox \"edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"466540b3f5b1c69eef2ccbfca0833599a4afe744b0cb64c60104589245d97037\"" Jul 15 11:33:17.857764 env[1206]: time="2025-07-15T11:33:17.857745866Z" level=info msg="StartContainer for \"466540b3f5b1c69eef2ccbfca0833599a4afe744b0cb64c60104589245d97037\"" Jul 15 11:33:17.874383 systemd[1]: Started cri-containerd-466540b3f5b1c69eef2ccbfca0833599a4afe744b0cb64c60104589245d97037.scope. Jul 15 11:33:17.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit: BPF prog-id=210 op=LOAD Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3850 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363534306233663562316336396565663263636266636130383333 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3850 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363534306233663562316336396565663263636266636130383333 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit: BPF prog-id=211 op=LOAD Jul 15 11:33:17.888000 audit[4545]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001e39f0 items=0 ppid=3850 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363534306233663562316336396565663263636266636130383333 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit: BPF prog-id=212 op=LOAD Jul 15 11:33:17.888000 audit[4545]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001e3a38 items=0 ppid=3850 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363534306233663562316336396565663263636266636130383333 Jul 15 11:33:17.888000 audit: BPF prog-id=212 op=UNLOAD Jul 15 11:33:17.888000 audit: BPF prog-id=211 op=UNLOAD Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { perfmon } for pid=4545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit[4545]: AVC avc: denied { bpf } for pid=4545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.888000 audit: BPF prog-id=213 op=LOAD Jul 15 11:33:17.888000 audit[4545]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001e3e48 items=0 ppid=3850 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363534306233663562316336396565663263636266636130383333 Jul 15 11:33:17.916839 env[1206]: time="2025-07-15T11:33:17.916724850Z" level=info msg="StartContainer for \"466540b3f5b1c69eef2ccbfca0833599a4afe744b0cb64c60104589245d97037\" returns successfully" Jul 15 11:33:18.037007 systemd-networkd[1026]: cali952419ac96d: Gained IPv6LL Jul 15 11:33:18.065690 kubelet[1944]: E0715 11:33:18.065651 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:18.426077 kubelet[1944]: I0715 11:33:18.426020 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6644dcb798-st6rl" podStartSLOduration=32.781207066 podStartE2EDuration="37.425999788s" podCreationTimestamp="2025-07-15 11:32:41 +0000 UTC" firstStartedPulling="2025-07-15 11:33:13.115689354 +0000 UTC m=+48.489833498" lastFinishedPulling="2025-07-15 11:33:17.760482086 +0000 UTC m=+53.134626220" observedRunningTime="2025-07-15 11:33:18.41221754 +0000 UTC m=+53.786361684" watchObservedRunningTime="2025-07-15 11:33:18.425999788 +0000 UTC m=+53.800143932" Jul 15 11:33:18.434000 audit[4580]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4580 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:18.434000 audit[4580]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffec193b300 a2=0 a3=7ffec193b2ec items=0 ppid=2094 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:18.434000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:18.439000 audit[4580]: NETFILTER_CFG table=nat:119 family=2 entries=22 op=nft_register_rule pid=4580 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:18.439000 audit[4580]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffec193b300 a2=0 a3=7ffec193b2ec items=0 ppid=2094 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:18.439000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:18.452000 audit[4582]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4582 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:18.452000 audit[4582]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffde891fe20 a2=0 a3=7ffde891fe0c items=0 ppid=2094 pid=4582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:18.452000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:18.457000 audit[4582]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=4582 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:18.457000 audit[4582]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffde891fe20 a2=0 a3=7ffde891fe0c items=0 ppid=2094 pid=4582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:18.457000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:18.835000 audit[4556]: AVC avc: denied { watch } for pid=4556 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_32_59.3717360436/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c916 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c268,c916 tclass=file permissive=0 Jul 15 11:33:18.835000 audit[4556]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009edb00 a2=fc6 a3=0 items=0 ppid=3850 pid=4556 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c916 key=(null) Jul 15 11:33:18.835000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:33:18.874000 audit[4513]: AVC avc: denied { watch } for pid=4513 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_32_59.2583360199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c129 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c1,c129 tclass=file permissive=0 Jul 15 11:33:18.874000 audit[4513]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002718000 a2=fc6 a3=0 items=0 ppid=3700 pid=4513 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c129 key=(null) Jul 15 11:33:18.874000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:33:19.067576 kubelet[1944]: I0715 11:33:19.067547 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:33:19.067991 kubelet[1944]: I0715 11:33:19.067590 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:33:21.146291 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount783950000.mount: Deactivated successfully. Jul 15 11:33:21.189245 kubelet[1944]: I0715 11:33:21.189187 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6644dcb798-mhcvv" podStartSLOduration=35.203090287 podStartE2EDuration="40.189172591s" podCreationTimestamp="2025-07-15 11:32:41 +0000 UTC" firstStartedPulling="2025-07-15 11:33:12.289511096 +0000 UTC m=+47.663655240" lastFinishedPulling="2025-07-15 11:33:17.2755934 +0000 UTC m=+52.649737544" observedRunningTime="2025-07-15 11:33:18.427757527 +0000 UTC m=+53.801901671" watchObservedRunningTime="2025-07-15 11:33:21.189172591 +0000 UTC m=+56.563316735" Jul 15 11:33:21.255000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.257104 kernel: kauditd_printk_skb: 199 callbacks suppressed Jul 15 11:33:21.257173 kernel: audit: type=1400 audit(1752579201.255:1405): avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.255000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.268699 kernel: audit: type=1400 audit(1752579201.255:1406): avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.268750 kernel: audit: type=1400 audit(1752579201.255:1407): avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.255000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.272480 kernel: audit: type=1300 audit(1752579201.255:1406): arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0051832e0 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:33:21.301023 kernel: audit: type=1300 audit(1752579201.255:1407): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00f8b5170 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:33:21.301074 kernel: audit: type=1327 audit(1752579201.255:1406): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:21.301093 kernel: audit: type=1327 audit(1752579201.255:1407): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:21.301111 kernel: audit: type=1400 audit(1752579201.255:1408): avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.301139 kernel: audit: type=1300 audit(1752579201.255:1408): arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c00984d740 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:33:21.301782 kernel: audit: type=1327 audit(1752579201.255:1408): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:21.255000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0051832e0 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:33:21.255000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00f8b5170 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:33:21.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:21.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:21.255000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.255000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c00984d740 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:33:21.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:21.255000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c011479c80 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:33:21.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:21.261000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.261000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00ee491a0 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:33:21.261000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:21.306000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.306000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00f8b51a0 a2=fc6 a3=0 items=0 ppid=1672 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c102,c546 key=(null) Jul 15 11:33:21.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:21.320000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.320000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:21.320000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b6eff0 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:33:21.320000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0028c5a00 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:33:21.320000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:21.320000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:22.289905 systemd[1]: Started sshd@10-10.0.0.85:22-10.0.0.1:34052.service. Jul 15 11:33:22.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.85:22-10.0.0.1:34052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:22.519694 env[1206]: time="2025-07-15T11:33:22.519640315Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:22.521683 env[1206]: time="2025-07-15T11:33:22.521648442Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:22.523415 env[1206]: time="2025-07-15T11:33:22.523391572Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:22.525299 env[1206]: time="2025-07-15T11:33:22.525260118Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:22.525867 env[1206]: time="2025-07-15T11:33:22.525841958Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 15 11:33:22.527009 env[1206]: time="2025-07-15T11:33:22.526972029Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:33:22.527987 env[1206]: time="2025-07-15T11:33:22.527957678Z" level=info msg="CreateContainer within sandbox \"2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:33:22.538000 audit[4616]: USER_ACCT pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.539496 sshd[4616]: Accepted publickey for core from 10.0.0.1 port 34052 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:22.539000 audit[4616]: CRED_ACQ pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.539000 audit[4616]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0e5da430 a2=3 a3=0 items=0 ppid=1 pid=4616 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:22.539000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:22.540513 sshd[4616]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:22.543607 systemd-logind[1195]: New session 11 of user core. Jul 15 11:33:22.544523 env[1206]: time="2025-07-15T11:33:22.544318909Z" level=info msg="CreateContainer within sandbox \"2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"1d1e3fc05452605a938761b059917f04c68ee99536f5a4401b88180e2d62f7a8\"" Jul 15 11:33:22.547430 env[1206]: time="2025-07-15T11:33:22.547308157Z" level=info msg="StartContainer for \"1d1e3fc05452605a938761b059917f04c68ee99536f5a4401b88180e2d62f7a8\"" Jul 15 11:33:22.552384 systemd[1]: Started session-11.scope. Jul 15 11:33:22.567000 audit[4616]: USER_START pid=4616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.573000 audit[4634]: CRED_ACQ pid=4634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.574922 systemd[1]: Started cri-containerd-1d1e3fc05452605a938761b059917f04c68ee99536f5a4401b88180e2d62f7a8.scope. Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit: BPF prog-id=214 op=LOAD Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3904 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:22.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164316533666330353435323630356139333837363162303539393137 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3904 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:22.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164316533666330353435323630356139333837363162303539393137 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.584000 audit: BPF prog-id=215 op=LOAD Jul 15 11:33:22.584000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000388020 items=0 ppid=3904 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:22.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164316533666330353435323630356139333837363162303539393137 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit: BPF prog-id=216 op=LOAD Jul 15 11:33:22.585000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000388068 items=0 ppid=3904 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:22.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164316533666330353435323630356139333837363162303539393137 Jul 15 11:33:22.585000 audit: BPF prog-id=216 op=UNLOAD Jul 15 11:33:22.585000 audit: BPF prog-id=215 op=UNLOAD Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:22.585000 audit: BPF prog-id=217 op=LOAD Jul 15 11:33:22.585000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000388478 items=0 ppid=3904 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:22.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164316533666330353435323630356139333837363162303539393137 Jul 15 11:33:22.608669 env[1206]: time="2025-07-15T11:33:22.608603158Z" level=info msg="StartContainer for \"1d1e3fc05452605a938761b059917f04c68ee99536f5a4401b88180e2d62f7a8\" returns successfully" Jul 15 11:33:22.807305 sshd[4616]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:22.807000 audit[4616]: USER_END pid=4616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.807000 audit[4616]: CRED_DISP pid=4616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.811314 systemd[1]: Started sshd@11-10.0.0.85:22-10.0.0.1:34062.service. Jul 15 11:33:22.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.85:22-10.0.0.1:34062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:22.811841 systemd[1]: sshd@10-10.0.0.85:22-10.0.0.1:34052.service: Deactivated successfully. Jul 15 11:33:22.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.85:22-10.0.0.1:34052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:22.812807 systemd-logind[1195]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:33:22.812919 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:33:22.813738 systemd-logind[1195]: Removed session 11. Jul 15 11:33:22.847000 audit[4668]: USER_ACCT pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.848118 sshd[4668]: Accepted publickey for core from 10.0.0.1 port 34062 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:22.847000 audit[4668]: CRED_ACQ pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.847000 audit[4668]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff86cb36d0 a2=3 a3=0 items=0 ppid=1 pid=4668 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:22.847000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:22.849029 sshd[4668]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:22.852037 systemd-logind[1195]: New session 12 of user core. Jul 15 11:33:22.852761 systemd[1]: Started session-12.scope. Jul 15 11:33:22.855000 audit[4668]: USER_START pid=4668 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.856000 audit[4671]: CRED_ACQ pid=4671 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.996000 audit[4668]: USER_END pid=4668 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.996000 audit[4668]: CRED_DISP pid=4668 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:22.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.85:22-10.0.0.1:34066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:22.997770 systemd[1]: Started sshd@12-10.0.0.85:22-10.0.0.1:34066.service. Jul 15 11:33:22.995587 sshd[4668]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:22.998308 systemd[1]: sshd@11-10.0.0.85:22-10.0.0.1:34062.service: Deactivated successfully. Jul 15 11:33:22.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.85:22-10.0.0.1:34062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:23.001282 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:33:23.001984 systemd-logind[1195]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:33:23.004596 systemd-logind[1195]: Removed session 12. Jul 15 11:33:23.040000 audit[4679]: USER_ACCT pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.041864 sshd[4679]: Accepted publickey for core from 10.0.0.1 port 34066 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:23.042000 audit[4679]: CRED_ACQ pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.042000 audit[4679]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda4d3f420 a2=3 a3=0 items=0 ppid=1 pid=4679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:23.042000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:23.043176 sshd[4679]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:23.046225 systemd-logind[1195]: New session 13 of user core. Jul 15 11:33:23.046939 systemd[1]: Started session-13.scope. Jul 15 11:33:23.050000 audit[4679]: USER_START pid=4679 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.051000 audit[4682]: CRED_ACQ pid=4682 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.092505 kubelet[1944]: I0715 11:33:23.091357 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-4pzc9" podStartSLOduration=29.755344671 podStartE2EDuration="39.091315417s" podCreationTimestamp="2025-07-15 11:32:44 +0000 UTC" firstStartedPulling="2025-07-15 11:33:13.190886187 +0000 UTC m=+48.565030331" lastFinishedPulling="2025-07-15 11:33:22.526856933 +0000 UTC m=+57.901001077" observedRunningTime="2025-07-15 11:33:23.090546676 +0000 UTC m=+58.464690840" watchObservedRunningTime="2025-07-15 11:33:23.091315417 +0000 UTC m=+58.465459591" Jul 15 11:33:23.105000 audit[4700]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4700 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:23.105000 audit[4700]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc0dbd1cc0 a2=0 a3=7ffc0dbd1cac items=0 ppid=2094 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:23.105000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:23.112000 audit[4700]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=4700 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:23.112000 audit[4700]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffc0dbd1cc0 a2=0 a3=7ffc0dbd1cac items=0 ppid=2094 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:23.112000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:23.183580 sshd[4679]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:23.183000 audit[4679]: USER_END pid=4679 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.184000 audit[4679]: CRED_DISP pid=4679 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.186333 systemd[1]: sshd@12-10.0.0.85:22-10.0.0.1:34066.service: Deactivated successfully. Jul 15 11:33:23.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.85:22-10.0.0.1:34066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:23.187062 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:33:23.187765 systemd-logind[1195]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:33:23.188674 systemd-logind[1195]: Removed session 13. Jul 15 11:33:24.098014 systemd[1]: run-containerd-runc-k8s.io-1d1e3fc05452605a938761b059917f04c68ee99536f5a4401b88180e2d62f7a8-runc.Q4a7BZ.mount: Deactivated successfully. Jul 15 11:33:24.954369 env[1206]: time="2025-07-15T11:33:24.954313281Z" level=info msg="StopPodSandbox for \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\"" Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.028 [WARNING][4750] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"c09f3584-588b-4ef0-bea9-18b4680d3787", ResourceVersion:"1181", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469", Pod:"goldmane-58fd7646b9-4pzc9", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali76fab65ea4a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.029 [INFO][4750] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.029 [INFO][4750] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" iface="eth0" netns="" Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.029 [INFO][4750] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.029 [INFO][4750] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.047 [INFO][4760] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" HandleID="k8s-pod-network.f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.047 [INFO][4760] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.047 [INFO][4760] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.053 [WARNING][4760] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" HandleID="k8s-pod-network.f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.053 [INFO][4760] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" HandleID="k8s-pod-network.f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.055 [INFO][4760] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:25.062680 env[1206]: 2025-07-15 11:33:25.060 [INFO][4750] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:25.063191 env[1206]: time="2025-07-15T11:33:25.062715028Z" level=info msg="TearDown network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\" successfully" Jul 15 11:33:25.063191 env[1206]: time="2025-07-15T11:33:25.062756305Z" level=info msg="StopPodSandbox for \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\" returns successfully" Jul 15 11:33:25.066100 env[1206]: time="2025-07-15T11:33:25.066059511Z" level=info msg="RemovePodSandbox for \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\"" Jul 15 11:33:25.066174 env[1206]: time="2025-07-15T11:33:25.066101099Z" level=info msg="Forcibly stopping sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\"" Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.098 [WARNING][4778] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"c09f3584-588b-4ef0-bea9-18b4680d3787", ResourceVersion:"1181", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2704bcc709019ea82edda96a85c6ae609793cdeb94e3c8b77e05caa1f7a9a469", Pod:"goldmane-58fd7646b9-4pzc9", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali76fab65ea4a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.098 [INFO][4778] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.099 [INFO][4778] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" iface="eth0" netns="" Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.099 [INFO][4778] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.099 [INFO][4778] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.115 [INFO][4786] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" HandleID="k8s-pod-network.f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.115 [INFO][4786] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.116 [INFO][4786] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.145 [WARNING][4786] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" HandleID="k8s-pod-network.f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.146 [INFO][4786] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" HandleID="k8s-pod-network.f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Workload="localhost-k8s-goldmane--58fd7646b9--4pzc9-eth0" Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.147 [INFO][4786] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:25.150502 env[1206]: 2025-07-15 11:33:25.149 [INFO][4778] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba" Jul 15 11:33:25.151271 env[1206]: time="2025-07-15T11:33:25.150531401Z" level=info msg="TearDown network for sandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\" successfully" Jul 15 11:33:25.191992 env[1206]: time="2025-07-15T11:33:25.191931183Z" level=info msg="RemovePodSandbox \"f54b8e6be39d86c0646dc0cb5662de5ecf97a1e5e5ef8434c59c24aa90dcc4ba\" returns successfully" Jul 15 11:33:25.192668 env[1206]: time="2025-07-15T11:33:25.192618352Z" level=info msg="StopPodSandbox for \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\"" Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.247 [WARNING][4804] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0", GenerateName:"calico-apiserver-6644dcb798-", Namespace:"calico-apiserver", SelfLink:"", UID:"c18c836b-6a9f-4a81-8d19-0a21744e1876", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6644dcb798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318", Pod:"calico-apiserver-6644dcb798-mhcvv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic5d6ad04a5b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.247 [INFO][4804] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.247 [INFO][4804] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" iface="eth0" netns="" Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.247 [INFO][4804] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.247 [INFO][4804] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.268 [INFO][4813] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" HandleID="k8s-pod-network.72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.268 [INFO][4813] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.269 [INFO][4813] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.274 [WARNING][4813] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" HandleID="k8s-pod-network.72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.274 [INFO][4813] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" HandleID="k8s-pod-network.72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.276 [INFO][4813] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:25.279771 env[1206]: 2025-07-15 11:33:25.278 [INFO][4804] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:25.279771 env[1206]: time="2025-07-15T11:33:25.279737677Z" level=info msg="TearDown network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\" successfully" Jul 15 11:33:25.279771 env[1206]: time="2025-07-15T11:33:25.279767203Z" level=info msg="StopPodSandbox for \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\" returns successfully" Jul 15 11:33:25.281328 env[1206]: time="2025-07-15T11:33:25.280206357Z" level=info msg="RemovePodSandbox for \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\"" Jul 15 11:33:25.281328 env[1206]: time="2025-07-15T11:33:25.280232125Z" level=info msg="Forcibly stopping sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\"" Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.327 [WARNING][4832] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0", GenerateName:"calico-apiserver-6644dcb798-", Namespace:"calico-apiserver", SelfLink:"", UID:"c18c836b-6a9f-4a81-8d19-0a21744e1876", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6644dcb798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"62947c8acdc29e3e4f60f5a265797532311860bcf2aab4b470cb403d530b4318", Pod:"calico-apiserver-6644dcb798-mhcvv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic5d6ad04a5b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.327 [INFO][4832] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.327 [INFO][4832] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" iface="eth0" netns="" Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.327 [INFO][4832] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.327 [INFO][4832] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.347 [INFO][4841] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" HandleID="k8s-pod-network.72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.347 [INFO][4841] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.347 [INFO][4841] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.353 [WARNING][4841] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" HandleID="k8s-pod-network.72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.353 [INFO][4841] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" HandleID="k8s-pod-network.72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Workload="localhost-k8s-calico--apiserver--6644dcb798--mhcvv-eth0" Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.354 [INFO][4841] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:25.357257 env[1206]: 2025-07-15 11:33:25.355 [INFO][4832] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c" Jul 15 11:33:25.357807 env[1206]: time="2025-07-15T11:33:25.357772904Z" level=info msg="TearDown network for sandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\" successfully" Jul 15 11:33:25.405758 env[1206]: time="2025-07-15T11:33:25.405667098Z" level=info msg="RemovePodSandbox \"72b3fd5edcc664d31d04c0cbb8873c870fb085186ee0296d9ba70cdd7234e15c\" returns successfully" Jul 15 11:33:25.406390 env[1206]: time="2025-07-15T11:33:25.406297531Z" level=info msg="StopPodSandbox for \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\"" Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.441 [WARNING][4860] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"761df6db-bbcd-4fe9-80ab-3a95e8a52330", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d", Pod:"coredns-7c65d6cfc9-rdrvp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali151b39d356e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.441 [INFO][4860] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.441 [INFO][4860] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" iface="eth0" netns="" Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.441 [INFO][4860] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.441 [INFO][4860] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.461 [INFO][4868] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" HandleID="k8s-pod-network.d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.461 [INFO][4868] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.461 [INFO][4868] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.467 [WARNING][4868] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" HandleID="k8s-pod-network.d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.467 [INFO][4868] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" HandleID="k8s-pod-network.d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.469 [INFO][4868] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:25.472025 env[1206]: 2025-07-15 11:33:25.470 [INFO][4860] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:25.472556 env[1206]: time="2025-07-15T11:33:25.472048186Z" level=info msg="TearDown network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\" successfully" Jul 15 11:33:25.472556 env[1206]: time="2025-07-15T11:33:25.472078072Z" level=info msg="StopPodSandbox for \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\" returns successfully" Jul 15 11:33:25.472635 env[1206]: time="2025-07-15T11:33:25.472601895Z" level=info msg="RemovePodSandbox for \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\"" Jul 15 11:33:25.472670 env[1206]: time="2025-07-15T11:33:25.472641268Z" level=info msg="Forcibly stopping sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\"" Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.517 [WARNING][4885] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"761df6db-bbcd-4fe9-80ab-3a95e8a52330", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"955342cb1d75189b04079973fd0bdb8a883458713770b5086e71c858495a958d", Pod:"coredns-7c65d6cfc9-rdrvp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali151b39d356e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.518 [INFO][4885] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.518 [INFO][4885] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" iface="eth0" netns="" Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.518 [INFO][4885] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.518 [INFO][4885] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.538 [INFO][4893] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" HandleID="k8s-pod-network.d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.539 [INFO][4893] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.539 [INFO][4893] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.546 [WARNING][4893] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" HandleID="k8s-pod-network.d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.546 [INFO][4893] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" HandleID="k8s-pod-network.d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Workload="localhost-k8s-coredns--7c65d6cfc9--rdrvp-eth0" Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.575 [INFO][4893] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:25.578938 env[1206]: 2025-07-15 11:33:25.577 [INFO][4885] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8" Jul 15 11:33:25.578938 env[1206]: time="2025-07-15T11:33:25.578907167Z" level=info msg="TearDown network for sandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\" successfully" Jul 15 11:33:25.867000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:25.867000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001ac16a0 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:33:25.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:25.868000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:25.868000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00048e0e0 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:33:25.868000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:25.868000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:25.868000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000b87f60 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:33:25.868000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:25.892000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:25.892000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ac1740 a2=fc6 a3=0 items=0 ppid=1649 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c180,c456 key=(null) Jul 15 11:33:25.892000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:26.350297 env[1206]: time="2025-07-15T11:33:26.350174146Z" level=info msg="RemovePodSandbox \"d244032dbf69f1bc9fb1d769ce5d203737f4b872a610b0079ac9f8e5cf36b5c8\" returns successfully" Jul 15 11:33:26.350727 env[1206]: time="2025-07-15T11:33:26.350700573Z" level=info msg="StopPodSandbox for \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\"" Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.387 [WARNING][4913] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--92bfv-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"f4300a85-d6b1-4be7-b787-3060531fee25", ResourceVersion:"1120", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b", Pod:"csi-node-driver-92bfv", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali952419ac96d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.388 [INFO][4913] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.388 [INFO][4913] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" iface="eth0" netns="" Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.388 [INFO][4913] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.388 [INFO][4913] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.404 [INFO][4922] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" HandleID="k8s-pod-network.d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.404 [INFO][4922] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.404 [INFO][4922] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.409 [WARNING][4922] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" HandleID="k8s-pod-network.d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.409 [INFO][4922] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" HandleID="k8s-pod-network.d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.411 [INFO][4922] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:26.413992 env[1206]: 2025-07-15 11:33:26.412 [INFO][4913] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:26.428649 env[1206]: time="2025-07-15T11:33:26.414023421Z" level=info msg="TearDown network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\" successfully" Jul 15 11:33:26.428649 env[1206]: time="2025-07-15T11:33:26.414050782Z" level=info msg="StopPodSandbox for \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\" returns successfully" Jul 15 11:33:26.428649 env[1206]: time="2025-07-15T11:33:26.414497770Z" level=info msg="RemovePodSandbox for \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\"" Jul 15 11:33:26.428649 env[1206]: time="2025-07-15T11:33:26.414527907Z" level=info msg="Forcibly stopping sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\"" Jul 15 11:33:26.440110 env[1206]: time="2025-07-15T11:33:26.440067680Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:26.443253 env[1206]: time="2025-07-15T11:33:26.443214111Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:26.445511 env[1206]: time="2025-07-15T11:33:26.445490380Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:26.447882 env[1206]: time="2025-07-15T11:33:26.447858642Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:26.448350 env[1206]: time="2025-07-15T11:33:26.448317844Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 15 11:33:26.451536 env[1206]: time="2025-07-15T11:33:26.451502016Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:33:26.468667 env[1206]: time="2025-07-15T11:33:26.468635281Z" level=info msg="CreateContainer within sandbox \"9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.440 [WARNING][4940] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--92bfv-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"f4300a85-d6b1-4be7-b787-3060531fee25", ResourceVersion:"1120", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b", Pod:"csi-node-driver-92bfv", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali952419ac96d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.441 [INFO][4940] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.441 [INFO][4940] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" iface="eth0" netns="" Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.441 [INFO][4940] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.441 [INFO][4940] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.462 [INFO][4949] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" HandleID="k8s-pod-network.d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.462 [INFO][4949] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.462 [INFO][4949] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.467 [WARNING][4949] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" HandleID="k8s-pod-network.d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.467 [INFO][4949] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" HandleID="k8s-pod-network.d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Workload="localhost-k8s-csi--node--driver--92bfv-eth0" Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.468 [INFO][4949] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:26.471492 env[1206]: 2025-07-15 11:33:26.470 [INFO][4940] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7" Jul 15 11:33:26.471916 env[1206]: time="2025-07-15T11:33:26.471507999Z" level=info msg="TearDown network for sandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\" successfully" Jul 15 11:33:26.537114 env[1206]: time="2025-07-15T11:33:26.537076438Z" level=info msg="RemovePodSandbox \"d58649a16c026ea6bbb71f21d3e851ddd95a2c3829da2110f001bd8c776c69a7\" returns successfully" Jul 15 11:33:26.537472 env[1206]: time="2025-07-15T11:33:26.537443817Z" level=info msg="StopPodSandbox for \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\"" Jul 15 11:33:26.546244 env[1206]: time="2025-07-15T11:33:26.546198698Z" level=info msg="CreateContainer within sandbox \"9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"f15d48e197279bca8bfc87e62628dd62b560b66a3964af9a1eb4d19a107fbb5d\"" Jul 15 11:33:26.548351 env[1206]: time="2025-07-15T11:33:26.546990823Z" level=info msg="StartContainer for \"f15d48e197279bca8bfc87e62628dd62b560b66a3964af9a1eb4d19a107fbb5d\"" Jul 15 11:33:26.577300 systemd[1]: Started cri-containerd-f15d48e197279bca8bfc87e62628dd62b560b66a3964af9a1eb4d19a107fbb5d.scope. Jul 15 11:33:26.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.591232 kernel: kauditd_printk_skb: 122 callbacks suppressed Jul 15 11:33:26.591296 kernel: audit: type=1400 audit(1752579206.589:1464): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.600889 kernel: audit: type=1400 audit(1752579206.589:1465): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.604635 kernel: audit: type=1400 audit(1752579206.589:1466): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609703 kernel: audit: type=1400 audit(1752579206.589:1467): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.612853 kernel: audit: type=1400 audit(1752579206.589:1468): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.574 [WARNING][4968] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0", GenerateName:"calico-apiserver-6644dcb798-", Namespace:"calico-apiserver", SelfLink:"", UID:"cbc702ff-f005-4e72-822a-27c70a812c58", ResourceVersion:"1138", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6644dcb798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f", Pod:"calico-apiserver-6644dcb798-st6rl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibc8b11759e5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.575 [INFO][4968] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.575 [INFO][4968] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" iface="eth0" netns="" Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.575 [INFO][4968] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.575 [INFO][4968] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.600 [INFO][4993] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" HandleID="k8s-pod-network.74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.600 [INFO][4993] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.600 [INFO][4993] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.607 [WARNING][4993] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" HandleID="k8s-pod-network.74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.607 [INFO][4993] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" HandleID="k8s-pod-network.74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.610 [INFO][4993] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:26.619001 env[1206]: 2025-07-15 11:33:26.611 [INFO][4968] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:26.619001 env[1206]: time="2025-07-15T11:33:26.614313233Z" level=info msg="TearDown network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\" successfully" Jul 15 11:33:26.619001 env[1206]: time="2025-07-15T11:33:26.614342047Z" level=info msg="StopPodSandbox for \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\" returns successfully" Jul 15 11:33:26.619001 env[1206]: time="2025-07-15T11:33:26.614839250Z" level=info msg="RemovePodSandbox for \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\"" Jul 15 11:33:26.619001 env[1206]: time="2025-07-15T11:33:26.614864397Z" level=info msg="Forcibly stopping sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\"" Jul 15 11:33:26.619794 kernel: audit: type=1400 audit(1752579206.589:1469): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.619849 kernel: audit: type=1400 audit(1752579206.589:1470): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.626127 kernel: audit: type=1400 audit(1752579206.589:1471): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.626174 kernel: audit: type=1400 audit(1752579206.589:1472): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.632186 kernel: audit: type=1400 audit(1752579206.594:1473): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit: BPF prog-id=218 op=LOAD Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4092 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:26.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631356434386531393732373962636138626663383765363236323864 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4092 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:26.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631356434386531393732373962636138626663383765363236323864 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.594000 audit: BPF prog-id=219 op=LOAD Jul 15 11:33:26.594000 audit[4981]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001c2ad0 items=0 ppid=4092 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:26.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631356434386531393732373962636138626663383765363236323864 Jul 15 11:33:26.605000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.605000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.605000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.605000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.605000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.605000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.605000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.605000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.605000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.605000 audit: BPF prog-id=220 op=LOAD Jul 15 11:33:26.605000 audit[4981]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001c2b18 items=0 ppid=4092 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:26.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631356434386531393732373962636138626663383765363236323864 Jul 15 11:33:26.609000 audit: BPF prog-id=220 op=UNLOAD Jul 15 11:33:26.609000 audit: BPF prog-id=219 op=UNLOAD Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { perfmon } for pid=4981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit[4981]: AVC avc: denied { bpf } for pid=4981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:26.609000 audit: BPF prog-id=221 op=LOAD Jul 15 11:33:26.609000 audit[4981]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001c2f28 items=0 ppid=4092 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:26.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631356434386531393732373962636138626663383765363236323864 Jul 15 11:33:26.664926 env[1206]: time="2025-07-15T11:33:26.664868785Z" level=info msg="StartContainer for \"f15d48e197279bca8bfc87e62628dd62b560b66a3964af9a1eb4d19a107fbb5d\" returns successfully" Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.655 [WARNING][5020] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0", GenerateName:"calico-apiserver-6644dcb798-", Namespace:"calico-apiserver", SelfLink:"", UID:"cbc702ff-f005-4e72-822a-27c70a812c58", ResourceVersion:"1138", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6644dcb798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"edca43844f8c310bae1e3d6d91c4b623ed52da30cf5d48b4b5373dc7bd4d3d6f", Pod:"calico-apiserver-6644dcb798-st6rl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibc8b11759e5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.655 [INFO][5020] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.655 [INFO][5020] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" iface="eth0" netns="" Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.655 [INFO][5020] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.655 [INFO][5020] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.678 [INFO][5039] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" HandleID="k8s-pod-network.74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.678 [INFO][5039] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.680 [INFO][5039] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.687 [WARNING][5039] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" HandleID="k8s-pod-network.74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.687 [INFO][5039] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" HandleID="k8s-pod-network.74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Workload="localhost-k8s-calico--apiserver--6644dcb798--st6rl-eth0" Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.688 [INFO][5039] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:26.691343 env[1206]: 2025-07-15 11:33:26.689 [INFO][5020] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2" Jul 15 11:33:26.692107 env[1206]: time="2025-07-15T11:33:26.692066416Z" level=info msg="TearDown network for sandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\" successfully" Jul 15 11:33:26.698613 env[1206]: time="2025-07-15T11:33:26.698592837Z" level=info msg="RemovePodSandbox \"74d60ac4f1793caee58d6b354cd7e098fde75cca00f5aa2c908af0c022a546c2\" returns successfully" Jul 15 11:33:26.699168 env[1206]: time="2025-07-15T11:33:26.699148008Z" level=info msg="StopPodSandbox for \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\"" Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.753 [WARNING][5067] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" WorkloadEndpoint="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.753 [INFO][5067] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.753 [INFO][5067] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" iface="eth0" netns="" Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.753 [INFO][5067] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.753 [INFO][5067] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.774 [INFO][5075] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" HandleID="k8s-pod-network.a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Workload="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.774 [INFO][5075] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.774 [INFO][5075] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.820 [WARNING][5075] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" HandleID="k8s-pod-network.a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Workload="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.820 [INFO][5075] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" HandleID="k8s-pod-network.a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Workload="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.823 [INFO][5075] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:26.826843 env[1206]: 2025-07-15 11:33:26.824 [INFO][5067] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:26.827448 env[1206]: time="2025-07-15T11:33:26.827404425Z" level=info msg="TearDown network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\" successfully" Jul 15 11:33:26.827518 env[1206]: time="2025-07-15T11:33:26.827447105Z" level=info msg="StopPodSandbox for \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\" returns successfully" Jul 15 11:33:26.827976 env[1206]: time="2025-07-15T11:33:26.827952153Z" level=info msg="RemovePodSandbox for \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\"" Jul 15 11:33:26.828046 env[1206]: time="2025-07-15T11:33:26.827985756Z" level=info msg="Forcibly stopping sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\"" Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.892 [WARNING][5096] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" WorkloadEndpoint="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.892 [INFO][5096] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.892 [INFO][5096] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" iface="eth0" netns="" Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.892 [INFO][5096] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.892 [INFO][5096] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.914 [INFO][5108] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" HandleID="k8s-pod-network.a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Workload="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.914 [INFO][5108] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.914 [INFO][5108] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.965 [WARNING][5108] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" HandleID="k8s-pod-network.a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Workload="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.965 [INFO][5108] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" HandleID="k8s-pod-network.a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Workload="localhost-k8s-whisker--646d4f56cf--dxmld-eth0" Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.966 [INFO][5108] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:26.969566 env[1206]: 2025-07-15 11:33:26.968 [INFO][5096] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073" Jul 15 11:33:26.970475 env[1206]: time="2025-07-15T11:33:26.969602761Z" level=info msg="TearDown network for sandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\" successfully" Jul 15 11:33:26.973508 env[1206]: time="2025-07-15T11:33:26.973463973Z" level=info msg="RemovePodSandbox \"a8eb52e77b0e5fcf8347b8bd9a722aadd8f5efce1edeabfbef64937655a87073\" returns successfully" Jul 15 11:33:26.973960 env[1206]: time="2025-07-15T11:33:26.973936349Z" level=info msg="StopPodSandbox for \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\"" Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.034 [WARNING][5125] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9", ResourceVersion:"1112", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb", Pod:"coredns-7c65d6cfc9-gmfkp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibcbb57de92d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.034 [INFO][5125] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.034 [INFO][5125] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" iface="eth0" netns="" Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.034 [INFO][5125] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.034 [INFO][5125] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.050 [INFO][5134] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" HandleID="k8s-pod-network.b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.051 [INFO][5134] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.051 [INFO][5134] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.055 [WARNING][5134] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" HandleID="k8s-pod-network.b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.056 [INFO][5134] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" HandleID="k8s-pod-network.b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.096 [INFO][5134] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:27.103263 env[1206]: 2025-07-15 11:33:27.098 [INFO][5125] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:27.103263 env[1206]: time="2025-07-15T11:33:27.103125269Z" level=info msg="TearDown network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\" successfully" Jul 15 11:33:27.103263 env[1206]: time="2025-07-15T11:33:27.103148492Z" level=info msg="StopPodSandbox for \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\" returns successfully" Jul 15 11:33:27.105666 env[1206]: time="2025-07-15T11:33:27.104644248Z" level=info msg="RemovePodSandbox for \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\"" Jul 15 11:33:27.105666 env[1206]: time="2025-07-15T11:33:27.104667592Z" level=info msg="Forcibly stopping sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\"" Jul 15 11:33:27.169085 kubelet[1944]: I0715 11:33:27.168725 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7dbdfb9cff-bwzbt" podStartSLOduration=30.222368987 podStartE2EDuration="42.168708282s" podCreationTimestamp="2025-07-15 11:32:45 +0000 UTC" firstStartedPulling="2025-07-15 11:33:14.502946615 +0000 UTC m=+49.877090759" lastFinishedPulling="2025-07-15 11:33:26.44928592 +0000 UTC m=+61.823430054" observedRunningTime="2025-07-15 11:33:27.168227139 +0000 UTC m=+62.542371283" watchObservedRunningTime="2025-07-15 11:33:27.168708282 +0000 UTC m=+62.542852426" Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.171 [WARNING][5161] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"477d8e9e-2b8d-4dcb-ad01-f2f6efbfd3c9", ResourceVersion:"1112", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"64b578e840d366abe49cdb63dc83e9cedaa8d08d240d072765248903241bc0fb", Pod:"coredns-7c65d6cfc9-gmfkp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibcbb57de92d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.172 [INFO][5161] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.172 [INFO][5161] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" iface="eth0" netns="" Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.172 [INFO][5161] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.172 [INFO][5161] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.190 [INFO][5182] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" HandleID="k8s-pod-network.b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.190 [INFO][5182] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.190 [INFO][5182] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.195 [WARNING][5182] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" HandleID="k8s-pod-network.b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.195 [INFO][5182] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" HandleID="k8s-pod-network.b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Workload="localhost-k8s-coredns--7c65d6cfc9--gmfkp-eth0" Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.196 [INFO][5182] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:27.199428 env[1206]: 2025-07-15 11:33:27.197 [INFO][5161] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23" Jul 15 11:33:27.200174 env[1206]: time="2025-07-15T11:33:27.199447985Z" level=info msg="TearDown network for sandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\" successfully" Jul 15 11:33:27.386672 env[1206]: time="2025-07-15T11:33:27.386610194Z" level=info msg="RemovePodSandbox \"b67c3bfdff019cada3e7241c99d1d27bb1bdd8284fffe773fd2b8adcddb16c23\" returns successfully" Jul 15 11:33:27.387209 env[1206]: time="2025-07-15T11:33:27.387175625Z" level=info msg="StopPodSandbox for \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\"" Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.577 [WARNING][5200] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0", GenerateName:"calico-kube-controllers-7dbdfb9cff-", Namespace:"calico-system", SelfLink:"", UID:"9e21e34f-bad1-42a0-ba75-c6a2aae8541a", ResourceVersion:"1215", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7dbdfb9cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25", Pod:"calico-kube-controllers-7dbdfb9cff-bwzbt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali77528cc3fbd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.577 [INFO][5200] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.577 [INFO][5200] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" iface="eth0" netns="" Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.577 [INFO][5200] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.577 [INFO][5200] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.595 [INFO][5209] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" HandleID="k8s-pod-network.9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.595 [INFO][5209] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.595 [INFO][5209] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.600 [WARNING][5209] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" HandleID="k8s-pod-network.9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.600 [INFO][5209] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" HandleID="k8s-pod-network.9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.602 [INFO][5209] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:27.604988 env[1206]: 2025-07-15 11:33:27.603 [INFO][5200] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:27.605416 env[1206]: time="2025-07-15T11:33:27.605026541Z" level=info msg="TearDown network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\" successfully" Jul 15 11:33:27.605416 env[1206]: time="2025-07-15T11:33:27.605054073Z" level=info msg="StopPodSandbox for \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\" returns successfully" Jul 15 11:33:27.605568 env[1206]: time="2025-07-15T11:33:27.605532470Z" level=info msg="RemovePodSandbox for \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\"" Jul 15 11:33:27.605629 env[1206]: time="2025-07-15T11:33:27.605573998Z" level=info msg="Forcibly stopping sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\"" Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.633 [WARNING][5227] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0", GenerateName:"calico-kube-controllers-7dbdfb9cff-", Namespace:"calico-system", SelfLink:"", UID:"9e21e34f-bad1-42a0-ba75-c6a2aae8541a", ResourceVersion:"1215", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7dbdfb9cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9af6895cac21c77a8254c8e9e13c525f44dec2f518d896bbb7412801790afc25", Pod:"calico-kube-controllers-7dbdfb9cff-bwzbt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali77528cc3fbd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.634 [INFO][5227] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.634 [INFO][5227] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" iface="eth0" netns="" Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.634 [INFO][5227] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.634 [INFO][5227] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.650 [INFO][5236] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" HandleID="k8s-pod-network.9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.650 [INFO][5236] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.650 [INFO][5236] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.655 [WARNING][5236] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" HandleID="k8s-pod-network.9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.656 [INFO][5236] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" HandleID="k8s-pod-network.9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Workload="localhost-k8s-calico--kube--controllers--7dbdfb9cff--bwzbt-eth0" Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.657 [INFO][5236] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:27.660581 env[1206]: 2025-07-15 11:33:27.658 [INFO][5227] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40" Jul 15 11:33:27.660581 env[1206]: time="2025-07-15T11:33:27.660543879Z" level=info msg="TearDown network for sandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\" successfully" Jul 15 11:33:27.664339 env[1206]: time="2025-07-15T11:33:27.664312304Z" level=info msg="RemovePodSandbox \"9cfd6abaef7a2166be99976aa2714804b38e5c17f72f92c348bf223684502c40\" returns successfully" Jul 15 11:33:28.188266 systemd[1]: Started sshd@13-10.0.0.85:22-10.0.0.1:46246.service. Jul 15 11:33:28.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.85:22-10.0.0.1:46246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:28.191401 env[1206]: time="2025-07-15T11:33:28.191352429Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:28.193953 env[1206]: time="2025-07-15T11:33:28.193273426Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:28.194748 env[1206]: time="2025-07-15T11:33:28.194725023Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:28.197629 env[1206]: time="2025-07-15T11:33:28.196243008Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:28.197629 env[1206]: time="2025-07-15T11:33:28.196729292Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 15 11:33:28.199119 env[1206]: time="2025-07-15T11:33:28.199090954Z" level=info msg="CreateContainer within sandbox \"a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:33:28.213953 env[1206]: time="2025-07-15T11:33:28.213897002Z" level=info msg="CreateContainer within sandbox \"a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"631e67ea2d2ecb0f7a9321845426acea336dfe69c33615b028e7402e781558f8\"" Jul 15 11:33:28.214597 env[1206]: time="2025-07-15T11:33:28.214552764Z" level=info msg="StartContainer for \"631e67ea2d2ecb0f7a9321845426acea336dfe69c33615b028e7402e781558f8\"" Jul 15 11:33:28.235000 audit[5245]: USER_ACCT pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:28.237942 sshd[5245]: Accepted publickey for core from 10.0.0.1 port 46246 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:28.238000 audit[5245]: CRED_ACQ pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:28.238000 audit[5245]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9a74d220 a2=3 a3=0 items=0 ppid=1 pid=5245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.238000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:28.240423 sshd[5245]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:28.242695 systemd[1]: Started cri-containerd-631e67ea2d2ecb0f7a9321845426acea336dfe69c33615b028e7402e781558f8.scope. Jul 15 11:33:28.250535 systemd[1]: Started session-14.scope. Jul 15 11:33:28.251325 systemd-logind[1195]: New session 14 of user core. Jul 15 11:33:28.262000 audit[5245]: USER_START pid=5245 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:28.264000 audit[5271]: CRED_ACQ pid=5271 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f3e5959a088 items=0 ppid=4444 pid=5254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633316536376561326432656362306637613933323138343534323661 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.271000 audit: BPF prog-id=222 op=LOAD Jul 15 11:33:28.271000 audit[5254]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000387f68 items=0 ppid=4444 pid=5254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633316536376561326432656362306637613933323138343534323661 Jul 15 11:33:28.272000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.272000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.272000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.272000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.272000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.272000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.272000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.272000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.272000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.272000 audit: BPF prog-id=223 op=LOAD Jul 15 11:33:28.272000 audit[5254]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000387fb8 items=0 ppid=4444 pid=5254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633316536376561326432656362306637613933323138343534323661 Jul 15 11:33:28.274000 audit: BPF prog-id=223 op=UNLOAD Jul 15 11:33:28.274000 audit: BPF prog-id=222 op=UNLOAD Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { perfmon } for pid=5254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit[5254]: AVC avc: denied { bpf } for pid=5254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.274000 audit: BPF prog-id=224 op=LOAD Jul 15 11:33:28.274000 audit[5254]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003d8048 items=0 ppid=4444 pid=5254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633316536376561326432656362306637613933323138343534323661 Jul 15 11:33:28.441142 env[1206]: time="2025-07-15T11:33:28.440991646Z" level=info msg="StartContainer for \"631e67ea2d2ecb0f7a9321845426acea336dfe69c33615b028e7402e781558f8\" returns successfully" Jul 15 11:33:28.442455 env[1206]: time="2025-07-15T11:33:28.442419417Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:33:28.717967 sshd[5245]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:28.718000 audit[5245]: USER_END pid=5245 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:28.718000 audit[5245]: CRED_DISP pid=5245 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:28.720488 systemd[1]: sshd@13-10.0.0.85:22-10.0.0.1:46246.service: Deactivated successfully. Jul 15 11:33:28.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.85:22-10.0.0.1:46246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:28.721217 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:33:28.721957 systemd-logind[1195]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:33:28.722587 systemd-logind[1195]: Removed session 14. Jul 15 11:33:29.985874 systemd[1]: run-containerd-runc-k8s.io-f15d48e197279bca8bfc87e62628dd62b560b66a3964af9a1eb4d19a107fbb5d-runc.JWTqOM.mount: Deactivated successfully. Jul 15 11:33:30.245170 env[1206]: time="2025-07-15T11:33:30.245055584Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:30.247375 env[1206]: time="2025-07-15T11:33:30.247342293Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:30.249187 env[1206]: time="2025-07-15T11:33:30.249155104Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:30.250466 env[1206]: time="2025-07-15T11:33:30.250427829Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:30.250947 env[1206]: time="2025-07-15T11:33:30.250920362Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 15 11:33:30.252860 env[1206]: time="2025-07-15T11:33:30.252810122Z" level=info msg="CreateContainer within sandbox \"a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:33:30.264453 env[1206]: time="2025-07-15T11:33:30.264399618Z" level=info msg="CreateContainer within sandbox \"a7ce0857441e5cc7f77b8fffec277cb7c3c3ea97b084955e712776cdf228d89b\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"a26ea3fe623abe94660f2fadb0b1360a12d25215ea10eec95f144a0fc14fdad9\"" Jul 15 11:33:30.264888 env[1206]: time="2025-07-15T11:33:30.264868356Z" level=info msg="StartContainer for \"a26ea3fe623abe94660f2fadb0b1360a12d25215ea10eec95f144a0fc14fdad9\"" Jul 15 11:33:30.278817 systemd[1]: Started cri-containerd-a26ea3fe623abe94660f2fadb0b1360a12d25215ea10eec95f144a0fc14fdad9.scope. Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f9d04385448 items=0 ppid=4444 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:30.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132366561336665363233616265393436363066326661646230623133 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit: BPF prog-id=225 op=LOAD Jul 15 11:33:30.292000 audit[5350]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00023d2c8 items=0 ppid=4444 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:30.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132366561336665363233616265393436363066326661646230623133 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.292000 audit: BPF prog-id=226 op=LOAD Jul 15 11:33:30.292000 audit[5350]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00023d318 items=0 ppid=4444 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:30.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132366561336665363233616265393436363066326661646230623133 Jul 15 11:33:30.293000 audit: BPF prog-id=226 op=UNLOAD Jul 15 11:33:30.293000 audit: BPF prog-id=225 op=UNLOAD Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.293000 audit: BPF prog-id=227 op=LOAD Jul 15 11:33:30.293000 audit[5350]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00023d3a8 items=0 ppid=4444 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:30.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132366561336665363233616265393436363066326661646230623133 Jul 15 11:33:30.305135 env[1206]: time="2025-07-15T11:33:30.305079494Z" level=info msg="StartContainer for \"a26ea3fe623abe94660f2fadb0b1360a12d25215ea10eec95f144a0fc14fdad9\" returns successfully" Jul 15 11:33:30.939659 kubelet[1944]: I0715 11:33:30.939598 1944 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:33:30.939659 kubelet[1944]: I0715 11:33:30.939647 1944 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:33:30.978238 systemd[1]: run-containerd-runc-k8s.io-1d1e3fc05452605a938761b059917f04c68ee99536f5a4401b88180e2d62f7a8-runc.xGDRPc.mount: Deactivated successfully. Jul 15 11:33:33.722434 systemd[1]: Started sshd@14-10.0.0.85:22-10.0.0.1:46260.service. Jul 15 11:33:33.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.85:22-10.0.0.1:46260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:33.723778 kernel: kauditd_printk_skb: 144 callbacks suppressed Jul 15 11:33:33.723864 kernel: audit: type=1130 audit(1752579213.721:1503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.85:22-10.0.0.1:46260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:33.762000 audit[5386]: USER_ACCT pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.763238 sshd[5386]: Accepted publickey for core from 10.0.0.1 port 46260 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:33.766328 sshd[5386]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:33.762000 audit[5386]: CRED_ACQ pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.770172 systemd-logind[1195]: New session 15 of user core. Jul 15 11:33:33.770467 kernel: audit: type=1101 audit(1752579213.762:1504): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.770523 kernel: audit: type=1103 audit(1752579213.762:1505): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.770564 kernel: audit: type=1006 audit(1752579213.762:1506): pid=5386 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:33:33.771185 systemd[1]: Started session-15.scope. Jul 15 11:33:33.772841 kernel: audit: type=1300 audit(1752579213.762:1506): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd886103a0 a2=3 a3=0 items=0 ppid=1 pid=5386 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:33.762000 audit[5386]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd886103a0 a2=3 a3=0 items=0 ppid=1 pid=5386 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:33.778030 kernel: audit: type=1327 audit(1752579213.762:1506): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:33.762000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:33.772000 audit[5386]: USER_START pid=5386 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.782295 kernel: audit: type=1105 audit(1752579213.772:1507): pid=5386 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.782682 kernel: audit: type=1103 audit(1752579213.776:1508): pid=5388 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.776000 audit[5388]: CRED_ACQ pid=5388 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.929942 sshd[5386]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:33.930000 audit[5386]: USER_END pid=5386 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.932092 systemd[1]: sshd@14-10.0.0.85:22-10.0.0.1:46260.service: Deactivated successfully. Jul 15 11:33:33.932932 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:33:33.933465 systemd-logind[1195]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:33:33.934123 systemd-logind[1195]: Removed session 15. Jul 15 11:33:33.930000 audit[5386]: CRED_DISP pid=5386 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.938634 kernel: audit: type=1106 audit(1752579213.930:1509): pid=5386 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.938698 kernel: audit: type=1104 audit(1752579213.930:1510): pid=5386 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:33.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.85:22-10.0.0.1:46260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:36.707653 kubelet[1944]: E0715 11:33:36.707613 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:38.934497 systemd[1]: Started sshd@15-10.0.0.85:22-10.0.0.1:55224.service. Jul 15 11:33:38.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.85:22-10.0.0.1:55224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:38.939033 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:33:38.939081 kernel: audit: type=1130 audit(1752579218.933:1512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.85:22-10.0.0.1:55224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:38.969000 audit[5405]: USER_ACCT pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:38.970655 sshd[5405]: Accepted publickey for core from 10.0.0.1 port 55224 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:38.972205 sshd[5405]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:38.971000 audit[5405]: CRED_ACQ pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:38.975240 systemd-logind[1195]: New session 16 of user core. Jul 15 11:33:38.976251 systemd[1]: Started session-16.scope. Jul 15 11:33:39.013981 kernel: audit: type=1101 audit(1752579218.969:1513): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:39.014110 kernel: audit: type=1103 audit(1752579218.971:1514): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:39.014145 kernel: audit: type=1006 audit(1752579218.971:1515): pid=5405 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 15 11:33:38.971000 audit[5405]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff86369b00 a2=3 a3=0 items=0 ppid=1 pid=5405 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:39.020623 kernel: audit: type=1300 audit(1752579218.971:1515): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff86369b00 a2=3 a3=0 items=0 ppid=1 pid=5405 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:39.020677 kernel: audit: type=1327 audit(1752579218.971:1515): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:38.971000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:39.021881 kernel: audit: type=1105 audit(1752579218.980:1516): pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:38.980000 audit[5405]: USER_START pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:38.981000 audit[5407]: CRED_ACQ pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:39.029696 kernel: audit: type=1103 audit(1752579218.981:1517): pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:39.154104 sshd[5405]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:39.154000 audit[5405]: USER_END pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:39.154000 audit[5405]: CRED_DISP pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:39.158142 systemd[1]: sshd@15-10.0.0.85:22-10.0.0.1:55224.service: Deactivated successfully. Jul 15 11:33:39.159184 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:33:39.159784 systemd-logind[1195]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:33:39.160457 systemd-logind[1195]: Removed session 16. Jul 15 11:33:39.162781 kernel: audit: type=1106 audit(1752579219.154:1518): pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:39.162890 kernel: audit: type=1104 audit(1752579219.154:1519): pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:39.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.85:22-10.0.0.1:55224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:40.707725 kubelet[1944]: E0715 11:33:40.707681 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:44.159284 systemd[1]: Started sshd@16-10.0.0.85:22-10.0.0.1:55234.service. Jul 15 11:33:44.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.85:22-10.0.0.1:55234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:44.160699 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:33:44.160882 kernel: audit: type=1130 audit(1752579224.157:1521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.85:22-10.0.0.1:55234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:44.198000 audit[5419]: USER_ACCT pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.204088 sshd[5419]: Accepted publickey for core from 10.0.0.1 port 55234 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:44.203000 audit[5419]: CRED_ACQ pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.205895 sshd[5419]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:44.209638 kernel: audit: type=1101 audit(1752579224.198:1522): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.209955 kernel: audit: type=1103 audit(1752579224.203:1523): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.209997 kernel: audit: type=1006 audit(1752579224.203:1524): pid=5419 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 15 11:33:44.212992 kernel: audit: type=1300 audit(1752579224.203:1524): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf9d61970 a2=3 a3=0 items=0 ppid=1 pid=5419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:44.203000 audit[5419]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf9d61970 a2=3 a3=0 items=0 ppid=1 pid=5419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:44.212627 systemd[1]: Started session-17.scope. Jul 15 11:33:44.213298 systemd-logind[1195]: New session 17 of user core. Jul 15 11:33:44.203000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:44.218598 kernel: audit: type=1327 audit(1752579224.203:1524): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:44.217000 audit[5419]: USER_START pid=5419 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.218000 audit[5421]: CRED_ACQ pid=5421 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.229237 kernel: audit: type=1105 audit(1752579224.217:1525): pid=5419 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.229316 kernel: audit: type=1103 audit(1752579224.218:1526): pid=5421 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.332352 sshd[5419]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:44.331000 audit[5419]: USER_END pid=5419 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.335249 systemd[1]: sshd@16-10.0.0.85:22-10.0.0.1:55234.service: Deactivated successfully. Jul 15 11:33:44.336160 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:33:44.337405 systemd-logind[1195]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:33:44.331000 audit[5419]: CRED_DISP pid=5419 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.338306 systemd-logind[1195]: Removed session 17. Jul 15 11:33:44.340931 kernel: audit: type=1106 audit(1752579224.331:1527): pid=5419 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.341030 kernel: audit: type=1104 audit(1752579224.331:1528): pid=5419 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:44.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.85:22-10.0.0.1:55234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:45.628704 kubelet[1944]: I0715 11:33:45.628661 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:33:45.649698 kubelet[1944]: I0715 11:33:45.649623 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-92bfv" podStartSLOduration=47.70740407 podStartE2EDuration="1m1.649604034s" podCreationTimestamp="2025-07-15 11:32:44 +0000 UTC" firstStartedPulling="2025-07-15 11:33:16.309384846 +0000 UTC m=+51.683528990" lastFinishedPulling="2025-07-15 11:33:30.251584809 +0000 UTC m=+65.625728954" observedRunningTime="2025-07-15 11:33:31.138895167 +0000 UTC m=+66.513039332" watchObservedRunningTime="2025-07-15 11:33:45.649604034 +0000 UTC m=+81.023748178" Jul 15 11:33:45.669000 audit[5435]: NETFILTER_CFG table=filter:124 family=2 entries=11 op=nft_register_rule pid=5435 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:45.669000 audit[5435]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc23b954e0 a2=0 a3=7ffc23b954cc items=0 ppid=2094 pid=5435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:45.669000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:45.674000 audit[5435]: NETFILTER_CFG table=nat:125 family=2 entries=29 op=nft_register_chain pid=5435 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:45.674000 audit[5435]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffc23b954e0 a2=0 a3=7ffc23b954cc items=0 ppid=2094 pid=5435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:45.674000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:49.345474 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:33:49.345671 kernel: audit: type=1130 audit(1752579229.337:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.85:22-10.0.0.1:41504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:49.337000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.85:22-10.0.0.1:41504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:49.338157 systemd[1]: Started sshd@17-10.0.0.85:22-10.0.0.1:41504.service. Jul 15 11:33:49.381000 audit[5437]: USER_ACCT pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.382844 sshd[5437]: Accepted publickey for core from 10.0.0.1 port 41504 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:49.385907 sshd[5437]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:49.391400 kernel: audit: type=1101 audit(1752579229.381:1533): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.391533 kernel: audit: type=1103 audit(1752579229.384:1534): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.384000 audit[5437]: CRED_ACQ pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.391246 systemd-logind[1195]: New session 18 of user core. Jul 15 11:33:49.392637 systemd[1]: Started session-18.scope. Jul 15 11:33:49.384000 audit[5437]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6f24efa0 a2=3 a3=0 items=0 ppid=1 pid=5437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.399509 kernel: audit: type=1006 audit(1752579229.384:1535): pid=5437 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 15 11:33:49.399592 kernel: audit: type=1300 audit(1752579229.384:1535): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6f24efa0 a2=3 a3=0 items=0 ppid=1 pid=5437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.399619 kernel: audit: type=1327 audit(1752579229.384:1535): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:49.384000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:49.401140 kernel: audit: type=1105 audit(1752579229.398:1536): pid=5437 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.398000 audit[5437]: USER_START pid=5437 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.399000 audit[5439]: CRED_ACQ pid=5439 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.408062 kernel: audit: type=1103 audit(1752579229.399:1537): pid=5439 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.521120 kubelet[1944]: I0715 11:33:49.521080 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:33:49.557000 audit[5449]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=5449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:49.557000 audit[5449]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd4e8961a0 a2=0 a3=7ffd4e89618c items=0 ppid=2094 pid=5449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.566431 kernel: audit: type=1325 audit(1752579229.557:1538): table=filter:126 family=2 entries=10 op=nft_register_rule pid=5449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:49.566729 kernel: audit: type=1300 audit(1752579229.557:1538): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd4e8961a0 a2=0 a3=7ffd4e89618c items=0 ppid=2094 pid=5449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.557000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:49.568000 audit[5449]: NETFILTER_CFG table=nat:127 family=2 entries=36 op=nft_register_chain pid=5449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:49.568000 audit[5449]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffd4e8961a0 a2=0 a3=7ffd4e89618c items=0 ppid=2094 pid=5449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.568000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:49.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.85:22-10.0.0.1:41520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:49.636698 systemd[1]: Started sshd@18-10.0.0.85:22-10.0.0.1:41520.service. Jul 15 11:33:49.636997 sshd[5437]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:49.643000 audit[5437]: USER_END pid=5437 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.643000 audit[5437]: CRED_DISP pid=5437 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.645909 systemd[1]: sshd@17-10.0.0.85:22-10.0.0.1:41504.service: Deactivated successfully. Jul 15 11:33:49.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.85:22-10.0.0.1:41504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:49.646643 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:33:49.648930 systemd-logind[1195]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:33:49.652159 systemd-logind[1195]: Removed session 18. Jul 15 11:33:49.678000 audit[5452]: USER_ACCT pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.679812 sshd[5452]: Accepted publickey for core from 10.0.0.1 port 41520 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:49.679000 audit[5452]: CRED_ACQ pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.679000 audit[5452]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8915a190 a2=3 a3=0 items=0 ppid=1 pid=5452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.679000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:49.680793 sshd[5452]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:49.685114 systemd[1]: Started session-19.scope. Jul 15 11:33:49.685519 systemd-logind[1195]: New session 19 of user core. Jul 15 11:33:49.689000 audit[5452]: USER_START pid=5452 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.691000 audit[5455]: CRED_ACQ pid=5455 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:49.707948 kubelet[1944]: E0715 11:33:49.707918 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:50.039043 sshd[5452]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:50.040000 audit[5452]: USER_END pid=5452 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.041723 systemd[1]: Started sshd@19-10.0.0.85:22-10.0.0.1:41526.service. Jul 15 11:33:50.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.85:22-10.0.0.1:41526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:50.041000 audit[5452]: CRED_DISP pid=5452 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.043808 systemd[1]: sshd@18-10.0.0.85:22-10.0.0.1:41520.service: Deactivated successfully. Jul 15 11:33:50.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.85:22-10.0.0.1:41520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:50.044360 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:33:50.044931 systemd-logind[1195]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:33:50.046099 systemd-logind[1195]: Removed session 19. Jul 15 11:33:50.081000 audit[5470]: USER_ACCT pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.082810 sshd[5470]: Accepted publickey for core from 10.0.0.1 port 41526 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:50.082000 audit[5470]: CRED_ACQ pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.082000 audit[5470]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed8002230 a2=3 a3=0 items=0 ppid=1 pid=5470 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:50.082000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:50.083844 sshd[5470]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:50.088561 systemd[1]: Started session-20.scope. Jul 15 11:33:50.088855 systemd-logind[1195]: New session 20 of user core. Jul 15 11:33:50.092000 audit[5470]: USER_START pid=5470 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.093000 audit[5473]: CRED_ACQ pid=5473 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.707210 kubelet[1944]: E0715 11:33:50.707177 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:51.961000 audit[5506]: NETFILTER_CFG table=filter:128 family=2 entries=22 op=nft_register_rule pid=5506 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:51.961000 audit[5506]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7fffc6651fc0 a2=0 a3=7fffc6651fac items=0 ppid=2094 pid=5506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.961000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:51.968000 audit[5506]: NETFILTER_CFG table=nat:129 family=2 entries=24 op=nft_register_rule pid=5506 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:51.968000 audit[5506]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7fffc6651fc0 a2=0 a3=0 items=0 ppid=2094 pid=5506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:51.973541 sshd[5470]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:51.974000 audit[5470]: USER_END pid=5470 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:51.974000 audit[5470]: CRED_DISP pid=5470 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:51.976943 systemd[1]: sshd@19-10.0.0.85:22-10.0.0.1:41526.service: Deactivated successfully. Jul 15 11:33:51.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.85:22-10.0.0.1:41526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:51.977567 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:33:51.979043 systemd-logind[1195]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:33:51.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.85:22-10.0.0.1:41538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:51.979527 systemd[1]: Started sshd@20-10.0.0.85:22-10.0.0.1:41538.service. Jul 15 11:33:51.982217 systemd-logind[1195]: Removed session 20. Jul 15 11:33:51.988000 audit[5511]: NETFILTER_CFG table=filter:130 family=2 entries=34 op=nft_register_rule pid=5511 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:51.988000 audit[5511]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7fffe104e6d0 a2=0 a3=7fffe104e6bc items=0 ppid=2094 pid=5511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.988000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:51.994000 audit[5511]: NETFILTER_CFG table=nat:131 family=2 entries=24 op=nft_register_rule pid=5511 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:51.994000 audit[5511]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7fffe104e6d0 a2=0 a3=0 items=0 ppid=2094 pid=5511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.994000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:52.019000 audit[5509]: USER_ACCT pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.020254 sshd[5509]: Accepted publickey for core from 10.0.0.1 port 41538 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:52.020000 audit[5509]: CRED_ACQ pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.020000 audit[5509]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd544d5d00 a2=3 a3=0 items=0 ppid=1 pid=5509 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.020000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:52.021244 sshd[5509]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:52.024549 systemd-logind[1195]: New session 21 of user core. Jul 15 11:33:52.025358 systemd[1]: Started session-21.scope. Jul 15 11:33:52.028000 audit[5509]: USER_START pid=5509 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.029000 audit[5513]: CRED_ACQ pid=5513 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.577091 sshd[5509]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:52.577000 audit[5509]: USER_END pid=5509 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.577000 audit[5509]: CRED_DISP pid=5509 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.580036 systemd[1]: sshd@20-10.0.0.85:22-10.0.0.1:41538.service: Deactivated successfully. Jul 15 11:33:52.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.85:22-10.0.0.1:41538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:52.580584 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:33:52.581429 systemd-logind[1195]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:33:52.583061 systemd[1]: Started sshd@21-10.0.0.85:22-10.0.0.1:41548.service. Jul 15 11:33:52.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.85:22-10.0.0.1:41548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:52.584218 systemd-logind[1195]: Removed session 21. Jul 15 11:33:52.618000 audit[5522]: USER_ACCT pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.619119 sshd[5522]: Accepted publickey for core from 10.0.0.1 port 41548 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:52.618000 audit[5522]: CRED_ACQ pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.618000 audit[5522]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff80beb0c0 a2=3 a3=0 items=0 ppid=1 pid=5522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.618000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:52.620016 sshd[5522]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:52.623394 systemd-logind[1195]: New session 22 of user core. Jul 15 11:33:52.624153 systemd[1]: Started session-22.scope. Jul 15 11:33:52.627000 audit[5522]: USER_START pid=5522 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.628000 audit[5524]: CRED_ACQ pid=5524 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.735244 sshd[5522]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:52.735000 audit[5522]: USER_END pid=5522 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.735000 audit[5522]: CRED_DISP pid=5522 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:52.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.85:22-10.0.0.1:41548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:52.738344 systemd[1]: sshd@21-10.0.0.85:22-10.0.0.1:41548.service: Deactivated successfully. Jul 15 11:33:52.739262 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:33:52.739996 systemd-logind[1195]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:33:52.741032 systemd-logind[1195]: Removed session 22. Jul 15 11:33:55.343593 systemd[1]: run-containerd-runc-k8s.io-1d1e3fc05452605a938761b059917f04c68ee99536f5a4401b88180e2d62f7a8-runc.baPMG9.mount: Deactivated successfully. Jul 15 11:33:57.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.85:22-10.0.0.1:41554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:57.740181 systemd[1]: Started sshd@22-10.0.0.85:22-10.0.0.1:41554.service. Jul 15 11:33:57.758435 kernel: kauditd_printk_skb: 63 callbacks suppressed Jul 15 11:33:57.758485 kernel: audit: type=1130 audit(1752579237.739:1583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.85:22-10.0.0.1:41554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:57.796000 audit[5558]: USER_ACCT pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:57.798190 sshd[5558]: Accepted publickey for core from 10.0.0.1 port 41554 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:57.799422 sshd[5558]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:57.801914 kernel: audit: type=1101 audit(1752579237.796:1584): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:57.802008 kernel: audit: type=1103 audit(1752579237.798:1585): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:57.798000 audit[5558]: CRED_ACQ pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:57.805492 systemd-logind[1195]: New session 23 of user core. Jul 15 11:33:57.806388 systemd[1]: Started session-23.scope. Jul 15 11:33:57.809001 kernel: audit: type=1006 audit(1752579237.798:1586): pid=5558 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 15 11:33:57.809047 kernel: audit: type=1300 audit(1752579237.798:1586): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2efcc790 a2=3 a3=0 items=0 ppid=1 pid=5558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:57.798000 audit[5558]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2efcc790 a2=3 a3=0 items=0 ppid=1 pid=5558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:57.798000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:57.828430 kernel: audit: type=1327 audit(1752579237.798:1586): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:57.828488 kernel: audit: type=1105 audit(1752579237.809:1587): pid=5558 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:57.809000 audit[5558]: USER_START pid=5558 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:57.810000 audit[5560]: CRED_ACQ pid=5560 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:57.836524 kernel: audit: type=1103 audit(1752579237.810:1588): pid=5560 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:58.188107 sshd[5558]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:58.188000 audit[5558]: USER_END pid=5558 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:58.188000 audit[5558]: CRED_DISP pid=5558 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:58.190571 systemd-logind[1195]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:33:58.191764 systemd[1]: sshd@22-10.0.0.85:22-10.0.0.1:41554.service: Deactivated successfully. Jul 15 11:33:58.192415 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:33:58.193450 systemd-logind[1195]: Removed session 23. Jul 15 11:33:58.262790 kernel: audit: type=1106 audit(1752579238.188:1589): pid=5558 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:58.262981 kernel: audit: type=1104 audit(1752579238.188:1590): pid=5558 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:58.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.85:22-10.0.0.1:41554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:59.647000 audit[5572]: NETFILTER_CFG table=filter:132 family=2 entries=22 op=nft_register_rule pid=5572 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:59.647000 audit[5572]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcab0babe0 a2=0 a3=7ffcab0babcc items=0 ppid=2094 pid=5572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:59.647000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:59.654000 audit[5572]: NETFILTER_CFG table=nat:133 family=2 entries=108 op=nft_register_chain pid=5572 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:59.654000 audit[5572]: SYSCALL arch=c000003e syscall=46 success=yes exit=50220 a0=3 a1=7ffcab0babe0 a2=0 a3=7ffcab0babcc items=0 ppid=2094 pid=5572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:59.654000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:59.998311 systemd[1]: run-containerd-runc-k8s.io-1d1e3fc05452605a938761b059917f04c68ee99536f5a4401b88180e2d62f7a8-runc.umVTnI.mount: Deactivated successfully. Jul 15 11:34:00.132000 audit[5619]: NETFILTER_CFG table=filter:134 family=2 entries=9 op=nft_register_rule pid=5619 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:00.132000 audit[5619]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc07ab60f0 a2=0 a3=7ffc07ab60dc items=0 ppid=2094 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:00.132000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:00.138000 audit[5619]: NETFILTER_CFG table=nat:135 family=2 entries=55 op=nft_register_chain pid=5619 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:00.138000 audit[5619]: SYSCALL arch=c000003e syscall=46 success=yes exit=20100 a0=3 a1=7ffc07ab60f0 a2=0 a3=7ffc07ab60dc items=0 ppid=2094 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:00.138000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:03.193193 systemd[1]: Started sshd@23-10.0.0.85:22-10.0.0.1:40468.service. Jul 15 11:34:03.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.85:22-10.0.0.1:40468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:03.194411 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 15 11:34:03.194477 kernel: audit: type=1130 audit(1752579243.192:1596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.85:22-10.0.0.1:40468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:03.233000 audit[5623]: USER_ACCT pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.234995 sshd[5623]: Accepted publickey for core from 10.0.0.1 port 40468 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:03.237000 audit[5623]: CRED_ACQ pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.238983 sshd[5623]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:03.242270 kernel: audit: type=1101 audit(1752579243.233:1597): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.242321 kernel: audit: type=1103 audit(1752579243.237:1598): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.242351 kernel: audit: type=1006 audit(1752579243.237:1599): pid=5623 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 15 11:34:03.243328 systemd[1]: Started session-24.scope. Jul 15 11:34:03.243765 systemd-logind[1195]: New session 24 of user core. Jul 15 11:34:03.244488 kernel: audit: type=1300 audit(1752579243.237:1599): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdfc8b640 a2=3 a3=0 items=0 ppid=1 pid=5623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:03.237000 audit[5623]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdfc8b640 a2=3 a3=0 items=0 ppid=1 pid=5623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:03.249557 kernel: audit: type=1327 audit(1752579243.237:1599): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:03.237000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:03.248000 audit[5623]: USER_START pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.253917 kernel: audit: type=1105 audit(1752579243.248:1600): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.254019 kernel: audit: type=1103 audit(1752579243.249:1601): pid=5625 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.249000 audit[5625]: CRED_ACQ pid=5625 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.379287 sshd[5623]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:03.379000 audit[5623]: USER_END pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.382063 systemd[1]: sshd@23-10.0.0.85:22-10.0.0.1:40468.service: Deactivated successfully. Jul 15 11:34:03.382741 systemd[1]: session-24.scope: Deactivated successfully. Jul 15 11:34:03.379000 audit[5623]: CRED_DISP pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.387962 kernel: audit: type=1106 audit(1752579243.379:1602): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.388070 kernel: audit: type=1104 audit(1752579243.379:1603): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:03.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.85:22-10.0.0.1:40468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:03.388676 systemd-logind[1195]: Session 24 logged out. Waiting for processes to exit. Jul 15 11:34:03.389477 systemd-logind[1195]: Removed session 24. Jul 15 11:34:08.384476 systemd[1]: Started sshd@24-10.0.0.85:22-10.0.0.1:52516.service. Jul 15 11:34:08.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.85:22-10.0.0.1:52516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:08.388263 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:34:08.388391 kernel: audit: type=1130 audit(1752579248.383:1605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.85:22-10.0.0.1:52516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:08.429000 audit[5636]: USER_ACCT pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.430501 sshd[5636]: Accepted publickey for core from 10.0.0.1 port 52516 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:08.433000 audit[5636]: CRED_ACQ pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.434851 kernel: audit: type=1101 audit(1752579248.429:1606): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.434903 kernel: audit: type=1103 audit(1752579248.433:1607): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.436340 sshd[5636]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:08.441028 kernel: audit: type=1006 audit(1752579248.435:1608): pid=5636 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 15 11:34:08.441174 kernel: audit: type=1300 audit(1752579248.435:1608): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5d5bbf50 a2=3 a3=0 items=0 ppid=1 pid=5636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:08.435000 audit[5636]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5d5bbf50 a2=3 a3=0 items=0 ppid=1 pid=5636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:08.442195 systemd[1]: Started session-25.scope. Jul 15 11:34:08.443320 systemd-logind[1195]: New session 25 of user core. Jul 15 11:34:08.435000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:08.447000 audit[5636]: USER_START pid=5636 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.455309 kernel: audit: type=1327 audit(1752579248.435:1608): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:08.455400 kernel: audit: type=1105 audit(1752579248.447:1609): pid=5636 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.455426 kernel: audit: type=1103 audit(1752579248.448:1610): pid=5638 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.448000 audit[5638]: CRED_ACQ pid=5638 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.613014 sshd[5636]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:08.613000 audit[5636]: USER_END pid=5636 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.615526 systemd[1]: sshd@24-10.0.0.85:22-10.0.0.1:52516.service: Deactivated successfully. Jul 15 11:34:08.616475 systemd[1]: session-25.scope: Deactivated successfully. Jul 15 11:34:08.617041 systemd-logind[1195]: Session 25 logged out. Waiting for processes to exit. Jul 15 11:34:08.617618 systemd-logind[1195]: Removed session 25. Jul 15 11:34:08.621771 kernel: audit: type=1106 audit(1752579248.613:1611): pid=5636 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.621902 kernel: audit: type=1104 audit(1752579248.613:1612): pid=5636 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.613000 audit[5636]: CRED_DISP pid=5636 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.85:22-10.0.0.1:52516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:13.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.85:22-10.0.0.1:52532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:13.617955 systemd[1]: Started sshd@25-10.0.0.85:22-10.0.0.1:52532.service. Jul 15 11:34:13.619008 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:34:13.619062 kernel: audit: type=1130 audit(1752579253.616:1614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.85:22-10.0.0.1:52532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:13.657000 audit[5649]: USER_ACCT pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.659112 sshd[5649]: Accepted publickey for core from 10.0.0.1 port 52532 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:13.662850 kernel: audit: type=1101 audit(1752579253.657:1615): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.661000 audit[5649]: CRED_ACQ pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.663365 sshd[5649]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:13.669043 kernel: audit: type=1103 audit(1752579253.661:1616): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.669105 kernel: audit: type=1006 audit(1752579253.661:1617): pid=5649 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 15 11:34:13.661000 audit[5649]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea888f130 a2=3 a3=0 items=0 ppid=1 pid=5649 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:13.670269 systemd[1]: Started session-26.scope. Jul 15 11:34:13.670390 systemd-logind[1195]: New session 26 of user core. Jul 15 11:34:13.673121 kernel: audit: type=1300 audit(1752579253.661:1617): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea888f130 a2=3 a3=0 items=0 ppid=1 pid=5649 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:13.673159 kernel: audit: type=1327 audit(1752579253.661:1617): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:13.661000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:13.673000 audit[5649]: USER_START pid=5649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.674000 audit[5651]: CRED_ACQ pid=5651 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.683047 kernel: audit: type=1105 audit(1752579253.673:1618): pid=5649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.683145 kernel: audit: type=1103 audit(1752579253.674:1619): pid=5651 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.799845 sshd[5649]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:13.798000 audit[5649]: USER_END pid=5649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.801892 systemd[1]: sshd@25-10.0.0.85:22-10.0.0.1:52532.service: Deactivated successfully. Jul 15 11:34:13.802599 systemd[1]: session-26.scope: Deactivated successfully. Jul 15 11:34:13.803113 systemd-logind[1195]: Session 26 logged out. Waiting for processes to exit. Jul 15 11:34:13.803754 systemd-logind[1195]: Removed session 26. Jul 15 11:34:13.798000 audit[5649]: CRED_DISP pid=5649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.808223 kernel: audit: type=1106 audit(1752579253.798:1620): pid=5649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.808274 kernel: audit: type=1104 audit(1752579253.798:1621): pid=5649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.85:22-10.0.0.1:52532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:14.057372 systemd[1]: run-containerd-runc-k8s.io-f15d48e197279bca8bfc87e62628dd62b560b66a3964af9a1eb4d19a107fbb5d-runc.iRVh7d.mount: Deactivated successfully.