Jul 15 11:32:13.869999 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Jul 15 10:04:37 -00 2025 Jul 15 11:32:13.870017 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:32:13.870026 kernel: BIOS-provided physical RAM map: Jul 15 11:32:13.870032 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 15 11:32:13.870037 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 15 11:32:13.870042 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 15 11:32:13.870068 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Jul 15 11:32:13.870074 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 15 11:32:13.870079 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 15 11:32:13.870086 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 15 11:32:13.870092 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Jul 15 11:32:13.870097 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 15 11:32:13.870103 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 15 11:32:13.870109 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 15 11:32:13.870116 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 15 11:32:13.870123 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 15 11:32:13.870129 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 15 11:32:13.870134 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 15 11:32:13.870140 kernel: NX (Execute Disable) protection: active Jul 15 11:32:13.870146 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 15 11:32:13.870152 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 15 11:32:13.870158 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 15 11:32:13.870164 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 15 11:32:13.870169 kernel: extended physical RAM map: Jul 15 11:32:13.870175 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 15 11:32:13.870182 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 15 11:32:13.870188 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 15 11:32:13.870194 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Jul 15 11:32:13.870200 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 15 11:32:13.870205 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 15 11:32:13.870211 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 15 11:32:13.870217 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b438017] usable Jul 15 11:32:13.870223 kernel: reserve setup_data: [mem 0x000000009b438018-0x000000009b474e57] usable Jul 15 11:32:13.870229 kernel: reserve setup_data: [mem 0x000000009b474e58-0x000000009b475017] usable Jul 15 11:32:13.870234 kernel: reserve setup_data: [mem 0x000000009b475018-0x000000009b47ec57] usable Jul 15 11:32:13.870240 kernel: reserve setup_data: [mem 0x000000009b47ec58-0x000000009c8eefff] usable Jul 15 11:32:13.870247 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 15 11:32:13.870253 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 15 11:32:13.870268 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 15 11:32:13.870288 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 15 11:32:13.870306 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 15 11:32:13.870313 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 15 11:32:13.870319 kernel: reserve setup_data: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 15 11:32:13.870326 kernel: efi: EFI v2.70 by EDK II Jul 15 11:32:13.870332 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b673018 RNG=0x9cb73018 Jul 15 11:32:13.870339 kernel: random: crng init done Jul 15 11:32:13.870345 kernel: SMBIOS 2.8 present. Jul 15 11:32:13.870352 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Jul 15 11:32:13.870358 kernel: Hypervisor detected: KVM Jul 15 11:32:13.870364 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 15 11:32:13.870370 kernel: kvm-clock: cpu 0, msr 5719b001, primary cpu clock Jul 15 11:32:13.870377 kernel: kvm-clock: using sched offset of 3975170454 cycles Jul 15 11:32:13.870385 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 15 11:32:13.870392 kernel: tsc: Detected 2794.750 MHz processor Jul 15 11:32:13.870399 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 15 11:32:13.870406 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 15 11:32:13.870414 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Jul 15 11:32:13.870421 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 15 11:32:13.870428 kernel: Using GB pages for direct mapping Jul 15 11:32:13.870436 kernel: Secure boot disabled Jul 15 11:32:13.870443 kernel: ACPI: Early table checksum verification disabled Jul 15 11:32:13.870450 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Jul 15 11:32:13.870457 kernel: ACPI: XSDT 0x000000009CB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Jul 15 11:32:13.870463 kernel: ACPI: FACP 0x000000009CB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:32:13.870470 kernel: ACPI: DSDT 0x000000009CB7A000 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:32:13.870476 kernel: ACPI: FACS 0x000000009CBDD000 000040 Jul 15 11:32:13.870492 kernel: ACPI: APIC 0x000000009CB78000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:32:13.870499 kernel: ACPI: HPET 0x000000009CB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:32:13.870505 kernel: ACPI: MCFG 0x000000009CB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:32:13.870512 kernel: ACPI: WAET 0x000000009CB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:32:13.870520 kernel: ACPI: BGRT 0x000000009CB74000 000038 (v01 INTEL EDK2 00000002 01000013) Jul 15 11:32:13.870526 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb79000-0x9cb790f3] Jul 15 11:32:13.870533 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7a000-0x9cb7c1b9] Jul 15 11:32:13.870539 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Jul 15 11:32:13.870546 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb78000-0x9cb7808f] Jul 15 11:32:13.870560 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb77000-0x9cb77037] Jul 15 11:32:13.870566 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cb76000-0x9cb7603b] Jul 15 11:32:13.870573 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb75000-0x9cb75027] Jul 15 11:32:13.870579 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb74000-0x9cb74037] Jul 15 11:32:13.870587 kernel: No NUMA configuration found Jul 15 11:32:13.870594 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Jul 15 11:32:13.870601 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Jul 15 11:32:13.870608 kernel: Zone ranges: Jul 15 11:32:13.870614 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 15 11:32:13.870621 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Jul 15 11:32:13.870627 kernel: Normal empty Jul 15 11:32:13.870634 kernel: Movable zone start for each node Jul 15 11:32:13.870640 kernel: Early memory node ranges Jul 15 11:32:13.870647 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Jul 15 11:32:13.870654 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Jul 15 11:32:13.870660 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Jul 15 11:32:13.870667 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Jul 15 11:32:13.870673 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Jul 15 11:32:13.870679 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Jul 15 11:32:13.870686 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Jul 15 11:32:13.870692 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:32:13.870699 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Jul 15 11:32:13.870705 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Jul 15 11:32:13.870712 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:32:13.870719 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Jul 15 11:32:13.870725 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Jul 15 11:32:13.870732 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Jul 15 11:32:13.870738 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 15 11:32:13.870745 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 15 11:32:13.870751 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 15 11:32:13.870758 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 15 11:32:13.870764 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 15 11:32:13.870772 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 15 11:32:13.870778 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 15 11:32:13.870785 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 15 11:32:13.870791 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 15 11:32:13.870798 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 15 11:32:13.870804 kernel: TSC deadline timer available Jul 15 11:32:13.870811 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 15 11:32:13.870817 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 15 11:32:13.870823 kernel: kvm-guest: setup PV sched yield Jul 15 11:32:13.870831 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Jul 15 11:32:13.870837 kernel: Booting paravirtualized kernel on KVM Jul 15 11:32:13.870848 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 15 11:32:13.870856 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 15 11:32:13.870862 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 15 11:32:13.870869 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 15 11:32:13.870876 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 15 11:32:13.870882 kernel: kvm-guest: setup async PF for cpu 0 Jul 15 11:32:13.870889 kernel: kvm-guest: stealtime: cpu 0, msr 9b21c0c0 Jul 15 11:32:13.870896 kernel: kvm-guest: PV spinlocks enabled Jul 15 11:32:13.870903 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 15 11:32:13.870909 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Jul 15 11:32:13.870917 kernel: Policy zone: DMA32 Jul 15 11:32:13.870925 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:32:13.870932 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:32:13.870939 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 15 11:32:13.870947 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:32:13.870954 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:32:13.870961 kernel: Memory: 2397432K/2567000K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 169308K reserved, 0K cma-reserved) Jul 15 11:32:13.870968 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 15 11:32:13.870975 kernel: ftrace: allocating 34607 entries in 136 pages Jul 15 11:32:13.870982 kernel: ftrace: allocated 136 pages with 2 groups Jul 15 11:32:13.870989 kernel: rcu: Hierarchical RCU implementation. Jul 15 11:32:13.870996 kernel: rcu: RCU event tracing is enabled. Jul 15 11:32:13.871003 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 15 11:32:13.871011 kernel: Rude variant of Tasks RCU enabled. Jul 15 11:32:13.871018 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:32:13.871025 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:32:13.871031 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 15 11:32:13.871038 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 15 11:32:13.871076 kernel: Console: colour dummy device 80x25 Jul 15 11:32:13.871083 kernel: printk: console [ttyS0] enabled Jul 15 11:32:13.871090 kernel: ACPI: Core revision 20210730 Jul 15 11:32:13.871097 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 15 11:32:13.871105 kernel: APIC: Switch to symmetric I/O mode setup Jul 15 11:32:13.871112 kernel: x2apic enabled Jul 15 11:32:13.871119 kernel: Switched APIC routing to physical x2apic. Jul 15 11:32:13.871126 kernel: kvm-guest: setup PV IPIs Jul 15 11:32:13.871133 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 15 11:32:13.871139 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 15 11:32:13.871146 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Jul 15 11:32:13.871153 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 15 11:32:13.871160 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 15 11:32:13.871168 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 15 11:32:13.871175 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 15 11:32:13.871182 kernel: Spectre V2 : Mitigation: Retpolines Jul 15 11:32:13.871189 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 15 11:32:13.871196 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 15 11:32:13.871202 kernel: RETBleed: Mitigation: untrained return thunk Jul 15 11:32:13.871209 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 15 11:32:13.871216 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 15 11:32:13.871223 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 15 11:32:13.871231 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 15 11:32:13.871238 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 15 11:32:13.871244 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 15 11:32:13.871251 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 15 11:32:13.871258 kernel: Freeing SMP alternatives memory: 32K Jul 15 11:32:13.871265 kernel: pid_max: default: 32768 minimum: 301 Jul 15 11:32:13.871272 kernel: LSM: Security Framework initializing Jul 15 11:32:13.871279 kernel: SELinux: Initializing. Jul 15 11:32:13.871285 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:32:13.871293 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:32:13.871300 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 15 11:32:13.871307 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 15 11:32:13.871314 kernel: ... version: 0 Jul 15 11:32:13.871321 kernel: ... bit width: 48 Jul 15 11:32:13.871327 kernel: ... generic registers: 6 Jul 15 11:32:13.871334 kernel: ... value mask: 0000ffffffffffff Jul 15 11:32:13.871341 kernel: ... max period: 00007fffffffffff Jul 15 11:32:13.871348 kernel: ... fixed-purpose events: 0 Jul 15 11:32:13.871355 kernel: ... event mask: 000000000000003f Jul 15 11:32:13.871362 kernel: signal: max sigframe size: 1776 Jul 15 11:32:13.871369 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:32:13.871376 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:32:13.871383 kernel: x86: Booting SMP configuration: Jul 15 11:32:13.871390 kernel: .... node #0, CPUs: #1 Jul 15 11:32:13.871399 kernel: kvm-clock: cpu 1, msr 5719b041, secondary cpu clock Jul 15 11:32:13.871406 kernel: kvm-guest: setup async PF for cpu 1 Jul 15 11:32:13.871414 kernel: kvm-guest: stealtime: cpu 1, msr 9b29c0c0 Jul 15 11:32:13.871422 kernel: #2 Jul 15 11:32:13.871429 kernel: kvm-clock: cpu 2, msr 5719b081, secondary cpu clock Jul 15 11:32:13.871436 kernel: kvm-guest: setup async PF for cpu 2 Jul 15 11:32:13.871443 kernel: kvm-guest: stealtime: cpu 2, msr 9b31c0c0 Jul 15 11:32:13.871450 kernel: #3 Jul 15 11:32:13.871456 kernel: kvm-clock: cpu 3, msr 5719b0c1, secondary cpu clock Jul 15 11:32:13.871463 kernel: kvm-guest: setup async PF for cpu 3 Jul 15 11:32:13.871470 kernel: kvm-guest: stealtime: cpu 3, msr 9b39c0c0 Jul 15 11:32:13.871476 kernel: smp: Brought up 1 node, 4 CPUs Jul 15 11:32:13.871483 kernel: smpboot: Max logical packages: 1 Jul 15 11:32:13.871491 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Jul 15 11:32:13.871498 kernel: devtmpfs: initialized Jul 15 11:32:13.871504 kernel: x86/mm: Memory block size: 128MB Jul 15 11:32:13.871511 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Jul 15 11:32:13.871518 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Jul 15 11:32:13.871525 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Jul 15 11:32:13.871532 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Jul 15 11:32:13.871539 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Jul 15 11:32:13.871546 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:32:13.871561 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 15 11:32:13.871568 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:32:13.871575 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:32:13.871582 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:32:13.871589 kernel: audit: type=2000 audit(1752579133.490:1): state=initialized audit_enabled=0 res=1 Jul 15 11:32:13.871596 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:32:13.871603 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 15 11:32:13.871609 kernel: cpuidle: using governor menu Jul 15 11:32:13.871616 kernel: ACPI: bus type PCI registered Jul 15 11:32:13.871624 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:32:13.871631 kernel: dca service started, version 1.12.1 Jul 15 11:32:13.871638 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 15 11:32:13.871645 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 15 11:32:13.871652 kernel: PCI: Using configuration type 1 for base access Jul 15 11:32:13.871659 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 15 11:32:13.871666 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:32:13.871672 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:32:13.871680 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:32:13.871687 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:32:13.871694 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:32:13.871701 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:32:13.871708 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:32:13.871714 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:32:13.871721 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:32:13.871728 kernel: ACPI: Interpreter enabled Jul 15 11:32:13.871735 kernel: ACPI: PM: (supports S0 S3 S5) Jul 15 11:32:13.871741 kernel: ACPI: Using IOAPIC for interrupt routing Jul 15 11:32:13.871750 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 15 11:32:13.871756 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 15 11:32:13.871763 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 15 11:32:13.871876 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:32:13.871946 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 15 11:32:13.872011 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 15 11:32:13.872020 kernel: PCI host bridge to bus 0000:00 Jul 15 11:32:13.872106 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 15 11:32:13.872167 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 15 11:32:13.872227 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 15 11:32:13.872285 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 15 11:32:13.872342 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 15 11:32:13.872400 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window] Jul 15 11:32:13.872458 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 15 11:32:13.872540 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 15 11:32:13.872627 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 15 11:32:13.872694 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Jul 15 11:32:13.872764 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xc1044000-0xc1044fff] Jul 15 11:32:13.872832 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Jul 15 11:32:13.872899 kernel: pci 0000:00:01.0: BAR 0: assigned to efifb Jul 15 11:32:13.872969 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 15 11:32:13.873060 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 15 11:32:13.873136 kernel: pci 0000:00:02.0: reg 0x10: [io 0x6100-0x611f] Jul 15 11:32:13.873231 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xc1043000-0xc1043fff] Jul 15 11:32:13.873299 kernel: pci 0000:00:02.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Jul 15 11:32:13.873372 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 15 11:32:13.873442 kernel: pci 0000:00:03.0: reg 0x10: [io 0x6000-0x607f] Jul 15 11:32:13.873517 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Jul 15 11:32:13.873595 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Jul 15 11:32:13.873671 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 15 11:32:13.873782 kernel: pci 0000:00:04.0: reg 0x10: [io 0x60e0-0x60ff] Jul 15 11:32:13.873851 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Jul 15 11:32:13.873918 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Jul 15 11:32:13.873985 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Jul 15 11:32:13.874080 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 15 11:32:13.874150 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 15 11:32:13.874223 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 15 11:32:13.874291 kernel: pci 0000:00:1f.2: reg 0x20: [io 0x60c0-0x60df] Jul 15 11:32:13.874357 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xc1040000-0xc1040fff] Jul 15 11:32:13.874430 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 15 11:32:13.874501 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x6080-0x60bf] Jul 15 11:32:13.874510 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 15 11:32:13.874518 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 15 11:32:13.874525 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 15 11:32:13.874531 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 15 11:32:13.874538 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 15 11:32:13.874545 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 15 11:32:13.874561 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 15 11:32:13.874568 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 15 11:32:13.874577 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 15 11:32:13.874584 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 15 11:32:13.874591 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 15 11:32:13.874598 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 15 11:32:13.874606 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 15 11:32:13.874612 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 15 11:32:13.874619 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 15 11:32:13.874626 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 15 11:32:13.874633 kernel: iommu: Default domain type: Translated Jul 15 11:32:13.874641 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 15 11:32:13.874714 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 15 11:32:13.874782 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 15 11:32:13.874852 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 15 11:32:13.874861 kernel: vgaarb: loaded Jul 15 11:32:13.874868 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:32:13.874875 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:32:13.874882 kernel: PTP clock support registered Jul 15 11:32:13.874889 kernel: Registered efivars operations Jul 15 11:32:13.874899 kernel: PCI: Using ACPI for IRQ routing Jul 15 11:32:13.874906 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 15 11:32:13.874913 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Jul 15 11:32:13.874920 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Jul 15 11:32:13.874926 kernel: e820: reserve RAM buffer [mem 0x9b438018-0x9bffffff] Jul 15 11:32:13.874933 kernel: e820: reserve RAM buffer [mem 0x9b475018-0x9bffffff] Jul 15 11:32:13.874940 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Jul 15 11:32:13.874946 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Jul 15 11:32:13.874954 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 15 11:32:13.874961 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 15 11:32:13.874968 kernel: clocksource: Switched to clocksource kvm-clock Jul 15 11:32:13.874975 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:32:13.874982 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:32:13.874989 kernel: pnp: PnP ACPI init Jul 15 11:32:13.875089 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 15 11:32:13.875100 kernel: pnp: PnP ACPI: found 6 devices Jul 15 11:32:13.875110 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 15 11:32:13.875117 kernel: NET: Registered PF_INET protocol family Jul 15 11:32:13.875124 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 15 11:32:13.875131 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 15 11:32:13.875138 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:32:13.875145 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:32:13.875152 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 15 11:32:13.875160 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 15 11:32:13.875166 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:32:13.875174 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:32:13.875181 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:32:13.875188 kernel: NET: Registered PF_XDP protocol family Jul 15 11:32:13.875259 kernel: pci 0000:00:04.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Jul 15 11:32:13.875330 kernel: pci 0000:00:04.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Jul 15 11:32:13.875392 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 15 11:32:13.875457 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 15 11:32:13.875535 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 15 11:32:13.875611 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 15 11:32:13.875694 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 15 11:32:13.875763 kernel: pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window] Jul 15 11:32:13.875772 kernel: PCI: CLS 0 bytes, default 64 Jul 15 11:32:13.875779 kernel: Initialise system trusted keyrings Jul 15 11:32:13.875786 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 15 11:32:13.875793 kernel: Key type asymmetric registered Jul 15 11:32:13.875800 kernel: Asymmetric key parser 'x509' registered Jul 15 11:32:13.875807 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:32:13.875816 kernel: io scheduler mq-deadline registered Jul 15 11:32:13.875823 kernel: io scheduler kyber registered Jul 15 11:32:13.875837 kernel: io scheduler bfq registered Jul 15 11:32:13.875846 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 15 11:32:13.875853 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 15 11:32:13.875861 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 15 11:32:13.875868 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 15 11:32:13.875875 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:32:13.875882 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 15 11:32:13.875890 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 15 11:32:13.875898 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 15 11:32:13.875905 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 15 11:32:13.875982 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 15 11:32:13.875993 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 15 11:32:13.876103 kernel: rtc_cmos 00:04: registered as rtc0 Jul 15 11:32:13.876165 kernel: rtc_cmos 00:04: setting system clock to 2025-07-15T11:32:13 UTC (1752579133) Jul 15 11:32:13.876226 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 15 11:32:13.876238 kernel: efifb: probing for efifb Jul 15 11:32:13.876245 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Jul 15 11:32:13.876252 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Jul 15 11:32:13.876259 kernel: efifb: scrolling: redraw Jul 15 11:32:13.876266 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jul 15 11:32:13.876274 kernel: Console: switching to colour frame buffer device 160x50 Jul 15 11:32:13.876281 kernel: fb0: EFI VGA frame buffer device Jul 15 11:32:13.876288 kernel: pstore: Registered efi as persistent store backend Jul 15 11:32:13.876295 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:32:13.876303 kernel: Segment Routing with IPv6 Jul 15 11:32:13.876311 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:32:13.876318 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:32:13.876326 kernel: Key type dns_resolver registered Jul 15 11:32:13.876333 kernel: IPI shorthand broadcast: enabled Jul 15 11:32:13.876341 kernel: sched_clock: Marking stable (404115115, 152234815)->(599533421, -43183491) Jul 15 11:32:13.876349 kernel: registered taskstats version 1 Jul 15 11:32:13.876357 kernel: Loading compiled-in X.509 certificates Jul 15 11:32:13.876365 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: c4b3a19d3bd6de5654dc12075428550cf6251289' Jul 15 11:32:13.876372 kernel: Key type .fscrypt registered Jul 15 11:32:13.876379 kernel: Key type fscrypt-provisioning registered Jul 15 11:32:13.876386 kernel: pstore: Using crash dump compression: deflate Jul 15 11:32:13.876393 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:32:13.876400 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:32:13.876409 kernel: ima: No architecture policies found Jul 15 11:32:13.876416 kernel: clk: Disabling unused clocks Jul 15 11:32:13.876423 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 15 11:32:13.876430 kernel: Write protecting the kernel read-only data: 28672k Jul 15 11:32:13.876438 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 15 11:32:13.876445 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 15 11:32:13.876452 kernel: Run /init as init process Jul 15 11:32:13.876459 kernel: with arguments: Jul 15 11:32:13.876466 kernel: /init Jul 15 11:32:13.876474 kernel: with environment: Jul 15 11:32:13.876481 kernel: HOME=/ Jul 15 11:32:13.876488 kernel: TERM=linux Jul 15 11:32:13.876495 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:32:13.876504 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:32:13.876514 systemd[1]: Detected virtualization kvm. Jul 15 11:32:13.876522 systemd[1]: Detected architecture x86-64. Jul 15 11:32:13.876529 systemd[1]: Running in initrd. Jul 15 11:32:13.876537 systemd[1]: No hostname configured, using default hostname. Jul 15 11:32:13.876545 systemd[1]: Hostname set to . Jul 15 11:32:13.876562 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:32:13.876569 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:32:13.876577 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:32:13.876585 systemd[1]: Reached target cryptsetup.target. Jul 15 11:32:13.876593 systemd[1]: Reached target paths.target. Jul 15 11:32:13.876600 systemd[1]: Reached target slices.target. Jul 15 11:32:13.876609 systemd[1]: Reached target swap.target. Jul 15 11:32:13.876616 systemd[1]: Reached target timers.target. Jul 15 11:32:13.876624 systemd[1]: Listening on iscsid.socket. Jul 15 11:32:13.876632 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:32:13.876640 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:32:13.876647 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:32:13.876655 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:32:13.876662 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:32:13.876671 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:32:13.876679 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:32:13.876686 systemd[1]: Reached target sockets.target. Jul 15 11:32:13.876694 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:32:13.876702 systemd[1]: Finished network-cleanup.service. Jul 15 11:32:13.876709 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:32:13.876717 systemd[1]: Starting systemd-journald.service... Jul 15 11:32:13.876724 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:32:13.876732 systemd[1]: Starting systemd-resolved.service... Jul 15 11:32:13.876740 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:32:13.876748 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:32:13.876756 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:32:13.876763 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:32:13.876771 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:32:13.876779 kernel: audit: type=1130 audit(1752579133.870:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.876786 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:32:13.876794 kernel: audit: type=1130 audit(1752579133.875:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.876805 systemd-journald[198]: Journal started Jul 15 11:32:13.876841 systemd-journald[198]: Runtime Journal (/run/log/journal/f6ead75ab8a34ca390e82e4c0f17e45a) is 6.0M, max 48.4M, 42.4M free. Jul 15 11:32:13.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.867454 systemd-modules-load[199]: Inserted module 'overlay' Jul 15 11:32:13.885959 systemd[1]: Started systemd-journald.service. Jul 15 11:32:13.885979 kernel: audit: type=1130 audit(1752579133.879:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.883368 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:32:13.895935 systemd-resolved[200]: Positive Trust Anchors: Jul 15 11:32:13.895950 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:32:13.895978 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:32:13.898089 systemd-resolved[200]: Defaulting to hostname 'linux'. Jul 15 11:32:13.902314 kernel: audit: type=1130 audit(1752579133.896:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.898761 systemd[1]: Started systemd-resolved.service. Jul 15 11:32:13.901986 systemd[1]: Reached target nss-lookup.target. Jul 15 11:32:13.913664 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:32:13.920015 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:32:13.920041 kernel: audit: type=1130 audit(1752579133.914:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.920079 kernel: Bridge firewalling registered Jul 15 11:32:13.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.918131 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:32:13.919969 systemd-modules-load[199]: Inserted module 'br_netfilter' Jul 15 11:32:13.927236 dracut-cmdline[215]: dracut-dracut-053 Jul 15 11:32:13.929272 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:32:13.937078 kernel: SCSI subsystem initialized Jul 15 11:32:13.948337 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:32:13.948359 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:32:13.949580 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:32:13.952221 systemd-modules-load[199]: Inserted module 'dm_multipath' Jul 15 11:32:13.952913 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:32:13.957463 kernel: audit: type=1130 audit(1752579133.953:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.954538 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:32:13.962423 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:32:13.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.967083 kernel: audit: type=1130 audit(1752579133.963:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:13.994076 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:32:14.010079 kernel: iscsi: registered transport (tcp) Jul 15 11:32:14.031069 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:32:14.031094 kernel: QLogic iSCSI HBA Driver Jul 15 11:32:14.061401 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:32:14.065711 kernel: audit: type=1130 audit(1752579134.061:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:14.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:14.065867 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:32:14.112067 kernel: raid6: avx2x4 gen() 30691 MB/s Jul 15 11:32:14.129067 kernel: raid6: avx2x4 xor() 7007 MB/s Jul 15 11:32:14.146064 kernel: raid6: avx2x2 gen() 32107 MB/s Jul 15 11:32:14.163072 kernel: raid6: avx2x2 xor() 19170 MB/s Jul 15 11:32:14.180071 kernel: raid6: avx2x1 gen() 26015 MB/s Jul 15 11:32:14.197072 kernel: raid6: avx2x1 xor() 15243 MB/s Jul 15 11:32:14.214073 kernel: raid6: sse2x4 gen() 14689 MB/s Jul 15 11:32:14.231073 kernel: raid6: sse2x4 xor() 7435 MB/s Jul 15 11:32:14.248069 kernel: raid6: sse2x2 gen() 16308 MB/s Jul 15 11:32:14.265073 kernel: raid6: sse2x2 xor() 9726 MB/s Jul 15 11:32:14.282070 kernel: raid6: sse2x1 gen() 12191 MB/s Jul 15 11:32:14.299403 kernel: raid6: sse2x1 xor() 7712 MB/s Jul 15 11:32:14.299425 kernel: raid6: using algorithm avx2x2 gen() 32107 MB/s Jul 15 11:32:14.299438 kernel: raid6: .... xor() 19170 MB/s, rmw enabled Jul 15 11:32:14.300117 kernel: raid6: using avx2x2 recovery algorithm Jul 15 11:32:14.313083 kernel: xor: automatically using best checksumming function avx Jul 15 11:32:14.401081 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 15 11:32:14.408800 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:32:14.413206 kernel: audit: type=1130 audit(1752579134.408:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:14.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:14.413000 audit: BPF prog-id=7 op=LOAD Jul 15 11:32:14.413000 audit: BPF prog-id=8 op=LOAD Jul 15 11:32:14.413534 systemd[1]: Starting systemd-udevd.service... Jul 15 11:32:14.424752 systemd-udevd[400]: Using default interface naming scheme 'v252'. Jul 15 11:32:14.428337 systemd[1]: Started systemd-udevd.service. Jul 15 11:32:14.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:14.431102 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:32:14.440420 dracut-pre-trigger[409]: rd.md=0: removing MD RAID activation Jul 15 11:32:14.465359 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:32:14.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:14.467728 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:32:14.498810 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:32:14.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:14.533077 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 15 11:32:14.563451 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:32:14.563468 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 15 11:32:14.563478 kernel: GPT:9289727 != 19775487 Jul 15 11:32:14.563486 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 15 11:32:14.563495 kernel: GPT:9289727 != 19775487 Jul 15 11:32:14.563503 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 15 11:32:14.563512 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:32:14.569068 kernel: AVX2 version of gcm_enc/dec engaged. Jul 15 11:32:14.569092 kernel: AES CTR mode by8 optimization enabled Jul 15 11:32:14.574077 kernel: libata version 3.00 loaded. Jul 15 11:32:14.579584 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:32:14.583068 kernel: ahci 0000:00:1f.2: version 3.0 Jul 15 11:32:14.608264 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 15 11:32:14.608278 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 15 11:32:14.608363 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 15 11:32:14.608442 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (455) Jul 15 11:32:14.608452 kernel: scsi host0: ahci Jul 15 11:32:14.608553 kernel: scsi host1: ahci Jul 15 11:32:14.608634 kernel: scsi host2: ahci Jul 15 11:32:14.608712 kernel: scsi host3: ahci Jul 15 11:32:14.608792 kernel: scsi host4: ahci Jul 15 11:32:14.608873 kernel: scsi host5: ahci Jul 15 11:32:14.608963 kernel: ata1: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040100 irq 34 Jul 15 11:32:14.608973 kernel: ata2: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040180 irq 34 Jul 15 11:32:14.608982 kernel: ata3: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040200 irq 34 Jul 15 11:32:14.608991 kernel: ata4: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040280 irq 34 Jul 15 11:32:14.609000 kernel: ata5: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040300 irq 34 Jul 15 11:32:14.609009 kernel: ata6: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040380 irq 34 Jul 15 11:32:14.584611 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:32:14.589002 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:32:14.619283 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:32:14.619303 disk-uuid[532]: Primary Header is updated. Jul 15 11:32:14.619303 disk-uuid[532]: Secondary Entries is updated. Jul 15 11:32:14.619303 disk-uuid[532]: Secondary Header is updated. Jul 15 11:32:14.622522 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:32:14.600611 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:32:14.604585 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:32:14.625431 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:32:14.607064 systemd[1]: Starting disk-uuid.service... Jul 15 11:32:14.922417 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 15 11:32:14.922483 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 15 11:32:14.922493 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 15 11:32:14.922502 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 15 11:32:14.924082 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 15 11:32:14.925077 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 15 11:32:14.926078 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 15 11:32:14.926100 kernel: ata3.00: applying bridge limits Jul 15 11:32:14.927217 kernel: ata3.00: configured for UDMA/100 Jul 15 11:32:14.928073 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 15 11:32:14.957136 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 15 11:32:14.974752 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 15 11:32:14.974764 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 15 11:32:15.625074 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:32:15.625232 disk-uuid[541]: The operation has completed successfully. Jul 15 11:32:15.647152 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:32:15.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.647234 systemd[1]: Finished disk-uuid.service. Jul 15 11:32:15.654322 systemd[1]: Starting verity-setup.service... Jul 15 11:32:15.667079 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 15 11:32:15.690489 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:32:15.692799 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:32:15.696343 systemd[1]: Finished verity-setup.service. Jul 15 11:32:15.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.760071 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:32:15.760108 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:32:15.761786 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 15 11:32:15.763971 systemd[1]: Starting ignition-setup.service... Jul 15 11:32:15.766155 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:32:15.772761 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:32:15.772806 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:32:15.772818 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:32:15.780801 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:32:15.788649 systemd[1]: Finished ignition-setup.service. Jul 15 11:32:15.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.791303 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:32:15.914430 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:32:15.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.916000 audit: BPF prog-id=9 op=LOAD Jul 15 11:32:15.917561 systemd[1]: Starting systemd-networkd.service... Jul 15 11:32:15.939380 systemd-networkd[720]: lo: Link UP Jul 15 11:32:15.939391 systemd-networkd[720]: lo: Gained carrier Jul 15 11:32:15.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.940005 systemd-networkd[720]: Enumeration completed Jul 15 11:32:15.940106 systemd[1]: Started systemd-networkd.service. Jul 15 11:32:15.940733 systemd-networkd[720]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:32:15.941740 systemd[1]: Reached target network.target. Jul 15 11:32:15.943180 systemd-networkd[720]: eth0: Link UP Jul 15 11:32:15.943183 systemd-networkd[720]: eth0: Gained carrier Jul 15 11:32:15.943381 systemd[1]: Starting iscsiuio.service... Jul 15 11:32:15.962422 ignition[642]: Ignition 2.14.0 Jul 15 11:32:15.962434 ignition[642]: Stage: fetch-offline Jul 15 11:32:15.962551 ignition[642]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:32:15.962560 ignition[642]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:32:15.962670 ignition[642]: parsed url from cmdline: "" Jul 15 11:32:15.962673 ignition[642]: no config URL provided Jul 15 11:32:15.962677 ignition[642]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:32:15.962683 ignition[642]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:32:15.962699 ignition[642]: op(1): [started] loading QEMU firmware config module Jul 15 11:32:15.962703 ignition[642]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 15 11:32:15.968163 ignition[642]: op(1): [finished] loading QEMU firmware config module Jul 15 11:32:15.968182 ignition[642]: QEMU firmware config was not found. Ignoring... Jul 15 11:32:15.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:15.974199 systemd[1]: Started iscsiuio.service. Jul 15 11:32:15.976005 systemd[1]: Starting iscsid.service... Jul 15 11:32:16.018624 ignition[642]: parsing config with SHA512: f80e55c817203ce09f80c7ed62425085bc35debdaef47ab79bc3b7906c36da317a135400feddca6a9be27e4620e315a0daf638de51f8808af8d9c6a74117803d Jul 15 11:32:16.032209 unknown[642]: fetched base config from "system" Jul 15 11:32:16.032478 unknown[642]: fetched user config from "qemu" Jul 15 11:32:16.035640 ignition[642]: fetch-offline: fetch-offline passed Jul 15 11:32:16.035896 ignition[642]: Ignition finished successfully Jul 15 11:32:16.037386 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:32:16.039106 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:32:16.040066 systemd[1]: Starting ignition-kargs.service... Jul 15 11:32:16.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.049455 iscsid[728]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:32:16.049455 iscsid[728]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:32:16.049455 iscsid[728]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:32:16.049455 iscsid[728]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:32:16.049455 iscsid[728]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:32:16.049455 iscsid[728]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:32:16.057140 systemd-networkd[720]: eth0: DHCPv4 address 10.0.0.90/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:32:16.057730 systemd[1]: Started iscsid.service. Jul 15 11:32:16.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.063703 ignition[729]: Ignition 2.14.0 Jul 15 11:32:16.063713 ignition[729]: Stage: kargs Jul 15 11:32:16.063820 ignition[729]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:32:16.063829 ignition[729]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:32:16.065232 ignition[729]: kargs: kargs passed Jul 15 11:32:16.065264 ignition[729]: Ignition finished successfully Jul 15 11:32:16.068303 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:32:16.069970 systemd[1]: Finished ignition-kargs.service. Jul 15 11:32:16.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.072245 systemd[1]: Starting ignition-disks.service... Jul 15 11:32:16.081501 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:32:16.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.081670 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:32:16.083816 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:32:16.085315 systemd[1]: Reached target remote-fs.target. Jul 15 11:32:16.088260 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:32:16.091385 ignition[736]: Ignition 2.14.0 Jul 15 11:32:16.091397 ignition[736]: Stage: disks Jul 15 11:32:16.091532 ignition[736]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:32:16.091541 ignition[736]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:32:16.095152 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:32:16.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.096907 ignition[736]: disks: disks passed Jul 15 11:32:16.096952 ignition[736]: Ignition finished successfully Jul 15 11:32:16.099005 systemd[1]: Finished ignition-disks.service. Jul 15 11:32:16.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.099195 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:32:16.101244 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:32:16.102796 systemd[1]: Reached target local-fs.target. Jul 15 11:32:16.104262 systemd[1]: Reached target sysinit.target. Jul 15 11:32:16.104966 systemd[1]: Reached target basic.target. Jul 15 11:32:16.107599 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:32:16.120104 systemd-fsck[756]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 15 11:32:16.125657 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:32:16.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.128813 systemd[1]: Mounting sysroot.mount... Jul 15 11:32:16.136070 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:32:16.136248 systemd[1]: Mounted sysroot.mount. Jul 15 11:32:16.137701 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:32:16.140323 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:32:16.141894 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:32:16.141931 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:32:16.143250 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:32:16.147374 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:32:16.149596 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:32:16.154550 initrd-setup-root[766]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:32:16.159437 initrd-setup-root[774]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:32:16.163343 initrd-setup-root[782]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:32:16.167095 initrd-setup-root[790]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:32:16.195232 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:32:16.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.196080 systemd[1]: Starting ignition-mount.service... Jul 15 11:32:16.197974 systemd[1]: Starting sysroot-boot.service... Jul 15 11:32:16.203601 bash[807]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:32:16.217776 systemd[1]: Finished ignition-mount.service. Jul 15 11:32:16.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.245847 ignition[809]: INFO : Ignition 2.14.0 Jul 15 11:32:16.245847 ignition[809]: INFO : Stage: mount Jul 15 11:32:16.245847 ignition[809]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:32:16.245847 ignition[809]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:32:16.245847 ignition[809]: INFO : mount: mount passed Jul 15 11:32:16.245847 ignition[809]: INFO : Ignition finished successfully Jul 15 11:32:16.286890 systemd[1]: Finished sysroot-boot.service. Jul 15 11:32:16.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.702773 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:32:16.711546 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (817) Jul 15 11:32:16.711572 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:32:16.711582 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:32:16.712309 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:32:16.716134 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:32:16.717619 systemd[1]: Starting ignition-files.service... Jul 15 11:32:16.731679 ignition[837]: INFO : Ignition 2.14.0 Jul 15 11:32:16.731679 ignition[837]: INFO : Stage: files Jul 15 11:32:16.733219 ignition[837]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:32:16.733219 ignition[837]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:32:16.736172 ignition[837]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:32:16.737596 ignition[837]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:32:16.737596 ignition[837]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:32:16.740588 ignition[837]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:32:16.742104 ignition[837]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:32:16.743592 unknown[837]: wrote ssh authorized keys file for user: core Jul 15 11:32:16.744767 ignition[837]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:32:16.744767 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 15 11:32:16.744767 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Jul 15 11:32:16.787376 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:32:16.994374 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 15 11:32:16.994374 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 15 11:32:16.998163 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Jul 15 11:32:17.146188 systemd-networkd[720]: eth0: Gained IPv6LL Jul 15 11:32:17.553551 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 15 11:32:18.122916 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 15 11:32:18.122916 ignition[837]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:32:18.126663 ignition[837]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:32:18.167653 ignition[837]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:32:18.167653 ignition[837]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:32:18.167653 ignition[837]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:32:18.167653 ignition[837]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:32:18.167653 ignition[837]: INFO : files: files passed Jul 15 11:32:18.167653 ignition[837]: INFO : Ignition finished successfully Jul 15 11:32:18.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.169016 systemd[1]: Finished ignition-files.service. Jul 15 11:32:18.171146 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:32:18.173184 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:32:18.187396 initrd-setup-root-after-ignition[862]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 15 11:32:18.174144 systemd[1]: Starting ignition-quench.service... Jul 15 11:32:18.190366 initrd-setup-root-after-ignition[865]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:32:18.176872 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:32:18.176949 systemd[1]: Finished ignition-quench.service. Jul 15 11:32:18.179296 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:32:18.180995 systemd[1]: Reached target ignition-complete.target. Jul 15 11:32:18.183418 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:32:18.196883 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:32:18.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.196962 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:32:18.198146 systemd[1]: Reached target initrd-fs.target. Jul 15 11:32:18.199868 systemd[1]: Reached target initrd.target. Jul 15 11:32:18.200686 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:32:18.201412 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:32:18.211987 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:32:18.218465 kernel: kauditd_printk_skb: 29 callbacks suppressed Jul 15 11:32:18.218524 kernel: audit: type=1130 audit(1752579138.212:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.214132 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:32:18.227137 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:32:18.228221 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:32:18.229896 systemd[1]: Stopped target timers.target. Jul 15 11:32:18.231864 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:32:18.238384 kernel: audit: type=1131 audit(1752579138.233:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.232113 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:32:18.233636 systemd[1]: Stopped target initrd.target. Jul 15 11:32:18.238682 systemd[1]: Stopped target basic.target. Jul 15 11:32:18.240471 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:32:18.242139 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:32:18.243848 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:32:18.245952 systemd[1]: Stopped target remote-fs.target. Jul 15 11:32:18.247881 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:32:18.249865 systemd[1]: Stopped target sysinit.target. Jul 15 11:32:18.251454 systemd[1]: Stopped target local-fs.target. Jul 15 11:32:18.253252 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:32:18.254813 systemd[1]: Stopped target swap.target. Jul 15 11:32:18.262747 kernel: audit: type=1131 audit(1752579138.258:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.256403 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:32:18.256632 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:32:18.269958 kernel: audit: type=1131 audit(1752579138.264:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.258320 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:32:18.274996 kernel: audit: type=1131 audit(1752579138.270:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.262858 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:32:18.263020 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:32:18.265138 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:32:18.265302 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:32:18.270248 systemd[1]: Stopped target paths.target. Jul 15 11:32:18.275163 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:32:18.281211 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:32:18.283740 systemd[1]: Stopped target slices.target. Jul 15 11:32:18.285899 systemd[1]: Stopped target sockets.target. Jul 15 11:32:18.288089 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:32:18.299746 kernel: audit: type=1131 audit(1752579138.290:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.299785 kernel: audit: type=1131 audit(1752579138.294:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.288441 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:32:18.303002 iscsid[728]: iscsid shutting down. Jul 15 11:32:18.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.290342 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:32:18.310609 kernel: audit: type=1131 audit(1752579138.303:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.310637 ignition[878]: INFO : Ignition 2.14.0 Jul 15 11:32:18.310637 ignition[878]: INFO : Stage: umount Jul 15 11:32:18.310637 ignition[878]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:32:18.310637 ignition[878]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:32:18.310637 ignition[878]: INFO : umount: umount passed Jul 15 11:32:18.310637 ignition[878]: INFO : Ignition finished successfully Jul 15 11:32:18.319643 kernel: audit: type=1131 audit(1752579138.310:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.290592 systemd[1]: Stopped ignition-files.service. Jul 15 11:32:18.296924 systemd[1]: Stopping ignition-mount.service... Jul 15 11:32:18.299736 systemd[1]: Stopping iscsid.service... Jul 15 11:32:18.300583 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:32:18.300821 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:32:18.307567 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:32:18.309498 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:32:18.309715 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:32:18.330776 kernel: audit: type=1131 audit(1752579138.326:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.326000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.314628 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:32:18.319757 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:32:18.335423 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:32:18.337098 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:32:18.338105 systemd[1]: Stopped iscsid.service. Jul 15 11:32:18.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.339957 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:32:18.340912 systemd[1]: Stopped ignition-mount.service. Jul 15 11:32:18.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.342801 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:32:18.342883 systemd[1]: Closed iscsid.socket. Jul 15 11:32:18.344497 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:32:18.344529 systemd[1]: Stopped ignition-disks.service. Jul 15 11:32:18.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.347804 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:32:18.347843 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:32:18.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.350235 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:32:18.350267 systemd[1]: Stopped ignition-setup.service. Jul 15 11:32:18.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.360164 systemd[1]: Stopping iscsiuio.service... Jul 15 11:32:18.362676 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:32:18.363719 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:32:18.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.365465 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:32:18.366403 systemd[1]: Stopped iscsiuio.service. Jul 15 11:32:18.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.368732 systemd[1]: Stopped target network.target. Jul 15 11:32:18.370390 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:32:18.370438 systemd[1]: Closed iscsiuio.socket. Jul 15 11:32:18.372880 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:32:18.374794 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:32:18.380102 systemd-networkd[720]: eth0: DHCPv6 lease lost Jul 15 11:32:18.381789 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:32:18.381860 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:32:18.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.384480 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:32:18.385445 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:32:18.387000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:32:18.387722 systemd[1]: Stopping network-cleanup.service... Jul 15 11:32:18.389540 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:32:18.389590 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:32:18.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.392887 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:32:18.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.392935 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:32:18.394900 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:32:18.395670 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:32:18.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.398417 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:32:18.401287 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:32:18.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.402588 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:32:18.402671 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:32:18.405878 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:32:18.406008 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:32:18.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.408000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:32:18.408160 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:32:18.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.408246 systemd[1]: Stopped network-cleanup.service. Jul 15 11:32:18.410000 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:32:18.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.410043 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:32:18.411819 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:32:18.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.411851 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:32:18.413379 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:32:18.413432 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:32:18.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.415212 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:32:18.415256 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:32:18.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:18.416954 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:32:18.416997 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:32:18.419767 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:32:18.420732 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:32:18.420785 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:32:18.422995 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:32:18.423115 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:32:18.424572 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:32:18.424615 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:32:18.426731 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:32:18.426809 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:32:18.428497 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:32:18.430112 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:32:18.444627 systemd[1]: Switching root. Jul 15 11:32:18.489118 systemd-journald[198]: Journal stopped Jul 15 11:32:21.633253 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Jul 15 11:32:21.633300 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:32:21.633314 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:32:21.633324 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:32:21.633342 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:32:21.633355 kernel: SELinux: policy capability open_perms=1 Jul 15 11:32:21.633365 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:32:21.633374 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:32:21.633383 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:32:21.633392 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:32:21.633401 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:32:21.633413 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:32:21.633423 systemd[1]: Successfully loaded SELinux policy in 41.819ms. Jul 15 11:32:21.633438 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.556ms. Jul 15 11:32:21.633449 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:32:21.633460 systemd[1]: Detected virtualization kvm. Jul 15 11:32:21.633470 systemd[1]: Detected architecture x86-64. Jul 15 11:32:21.633479 systemd[1]: Detected first boot. Jul 15 11:32:21.633491 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:32:21.633503 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:32:21.633512 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:32:21.633523 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:32:21.633535 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:32:21.633548 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:32:21.633560 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:32:21.633571 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:32:21.633581 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:32:21.633592 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:32:21.633602 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:32:21.633612 systemd[1]: Created slice system-getty.slice. Jul 15 11:32:21.633621 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:32:21.633634 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:32:21.633645 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:32:21.633655 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:32:21.633665 systemd[1]: Created slice user.slice. Jul 15 11:32:21.633675 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:32:21.633685 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:32:21.633697 systemd[1]: Set up automount boot.automount. Jul 15 11:32:21.633707 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:32:21.633717 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:32:21.633727 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:32:21.633739 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:32:21.633748 systemd[1]: Reached target integritysetup.target. Jul 15 11:32:21.633758 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:32:21.633769 systemd[1]: Reached target remote-fs.target. Jul 15 11:32:21.633778 systemd[1]: Reached target slices.target. Jul 15 11:32:21.633789 systemd[1]: Reached target swap.target. Jul 15 11:32:21.633799 systemd[1]: Reached target torcx.target. Jul 15 11:32:21.633809 systemd[1]: Reached target veritysetup.target. Jul 15 11:32:21.633820 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:32:21.633830 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:32:21.633840 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:32:21.633850 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:32:21.633860 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:32:21.633870 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:32:21.633880 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:32:21.633889 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:32:21.633899 systemd[1]: Mounting media.mount... Jul 15 11:32:21.633910 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:32:21.633920 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:32:21.633930 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:32:21.633940 systemd[1]: Mounting tmp.mount... Jul 15 11:32:21.633950 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:32:21.633960 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:32:21.633970 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:32:21.633980 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:32:21.633991 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:32:21.634002 systemd[1]: Starting modprobe@drm.service... Jul 15 11:32:21.634012 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:32:21.634024 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:32:21.634035 systemd[1]: Starting modprobe@loop.service... Jul 15 11:32:21.634058 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:32:21.634069 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:32:21.634079 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:32:21.634090 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:32:21.634100 kernel: loop: module loaded Jul 15 11:32:21.634111 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:32:21.634121 systemd[1]: Stopped systemd-journald.service. Jul 15 11:32:21.634130 kernel: fuse: init (API version 7.34) Jul 15 11:32:21.634140 systemd[1]: Starting systemd-journald.service... Jul 15 11:32:21.634150 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:32:21.634160 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:32:21.634170 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:32:21.634180 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:32:21.634190 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:32:21.634203 systemd-journald[997]: Journal started Jul 15 11:32:21.634238 systemd-journald[997]: Runtime Journal (/run/log/journal/f6ead75ab8a34ca390e82e4c0f17e45a) is 6.0M, max 48.4M, 42.4M free. Jul 15 11:32:18.542000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:32:18.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:32:18.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:32:18.991000 audit: BPF prog-id=10 op=LOAD Jul 15 11:32:18.991000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:32:18.991000 audit: BPF prog-id=11 op=LOAD Jul 15 11:32:18.991000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:32:19.019000 audit[912]: AVC avc: denied { associate } for pid=912 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:32:19.019000 audit[912]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001878e4 a1=c00002ae40 a2=c000029080 a3=32 items=0 ppid=895 pid=912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.019000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:32:19.069000 audit[912]: AVC avc: denied { associate } for pid=912 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:32:19.069000 audit[912]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001879b9 a2=1ed a3=0 items=2 ppid=895 pid=912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.069000 audit: CWD cwd="/" Jul 15 11:32:19.069000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:19.069000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:19.069000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:32:21.514000 audit: BPF prog-id=12 op=LOAD Jul 15 11:32:21.514000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:32:21.514000 audit: BPF prog-id=13 op=LOAD Jul 15 11:32:21.514000 audit: BPF prog-id=14 op=LOAD Jul 15 11:32:21.514000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:32:21.514000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:32:21.515000 audit: BPF prog-id=15 op=LOAD Jul 15 11:32:21.515000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:32:21.515000 audit: BPF prog-id=16 op=LOAD Jul 15 11:32:21.515000 audit: BPF prog-id=17 op=LOAD Jul 15 11:32:21.515000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:32:21.515000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:32:21.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.525000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:32:21.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.619000 audit: BPF prog-id=18 op=LOAD Jul 15 11:32:21.619000 audit: BPF prog-id=19 op=LOAD Jul 15 11:32:21.619000 audit: BPF prog-id=20 op=LOAD Jul 15 11:32:21.619000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:32:21.619000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:32:21.631000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:32:21.631000 audit[997]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffe99b3f070 a2=4000 a3=7ffe99b3f10c items=0 ppid=1 pid=997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:21.635162 systemd[1]: Stopped verity-setup.service. Jul 15 11:32:21.631000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:32:19.018135 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:32:21.513385 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:32:19.018387 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:32:21.513395 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 15 11:32:19.018414 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:32:21.516366 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:32:19.018442 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:32:19.018450 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:32:19.018477 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:32:19.018488 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:32:19.018667 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:32:19.018692 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:32:19.018703 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:32:19.019247 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:32:21.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:19.019277 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:32:19.019293 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:32:19.019307 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:32:19.019321 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:32:19.019333 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:19Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:32:21.264712 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:21Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:32:21.264946 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:21Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:32:21.265043 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:21Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:32:21.265218 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:21Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:32:21.265260 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:21Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:32:21.265313 /usr/lib/systemd/system-generators/torcx-generator[912]: time="2025-07-15T11:32:21Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:32:21.638086 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:32:21.640615 systemd[1]: Started systemd-journald.service. Jul 15 11:32:21.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.641159 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:32:21.641990 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:32:21.642800 systemd[1]: Mounted media.mount. Jul 15 11:32:21.643573 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:32:21.644445 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:32:21.645348 systemd[1]: Mounted tmp.mount. Jul 15 11:32:21.646316 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:32:21.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.647407 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:32:21.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.648446 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:32:21.648597 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:32:21.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.649641 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:32:21.649802 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:32:21.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.650849 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:32:21.651010 systemd[1]: Finished modprobe@drm.service. Jul 15 11:32:21.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.651992 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:32:21.652169 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:32:21.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.653216 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:32:21.653342 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:32:21.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.654451 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:32:21.654631 systemd[1]: Finished modprobe@loop.service. Jul 15 11:32:21.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.655660 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:32:21.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.656792 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:32:21.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.657960 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:32:21.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.659227 systemd[1]: Reached target network-pre.target. Jul 15 11:32:21.660931 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:32:21.662626 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:32:21.663505 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:32:21.664675 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:32:21.666538 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:32:21.667773 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:32:21.668672 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:32:21.670592 systemd-journald[997]: Time spent on flushing to /var/log/journal/f6ead75ab8a34ca390e82e4c0f17e45a is 14.172ms for 1158 entries. Jul 15 11:32:21.670592 systemd-journald[997]: System Journal (/var/log/journal/f6ead75ab8a34ca390e82e4c0f17e45a) is 8.0M, max 195.6M, 187.6M free. Jul 15 11:32:21.702539 systemd-journald[997]: Received client request to flush runtime journal. Jul 15 11:32:21.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.669795 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:32:21.671940 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:32:21.673929 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:32:21.676434 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:32:21.703536 udevadm[1017]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 15 11:32:21.677406 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:32:21.678537 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:32:21.680084 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:32:21.681442 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:32:21.683594 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:32:21.684596 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:32:21.690669 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:32:21.703115 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:32:21.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.415282 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:32:22.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.416000 audit: BPF prog-id=21 op=LOAD Jul 15 11:32:22.416000 audit: BPF prog-id=22 op=LOAD Jul 15 11:32:22.416000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:32:22.416000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:32:22.417649 systemd[1]: Starting systemd-udevd.service... Jul 15 11:32:22.433907 systemd-udevd[1019]: Using default interface naming scheme 'v252'. Jul 15 11:32:22.447207 systemd[1]: Started systemd-udevd.service. Jul 15 11:32:22.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.448000 audit: BPF prog-id=23 op=LOAD Jul 15 11:32:22.449589 systemd[1]: Starting systemd-networkd.service... Jul 15 11:32:22.454000 audit: BPF prog-id=24 op=LOAD Jul 15 11:32:22.454000 audit: BPF prog-id=25 op=LOAD Jul 15 11:32:22.454000 audit: BPF prog-id=26 op=LOAD Jul 15 11:32:22.455269 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:32:22.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.480622 systemd[1]: Started systemd-userdbd.service. Jul 15 11:32:22.488855 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 15 11:32:22.498537 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:32:22.519295 systemd-networkd[1025]: lo: Link UP Jul 15 11:32:22.519304 systemd-networkd[1025]: lo: Gained carrier Jul 15 11:32:22.519676 systemd-networkd[1025]: Enumeration completed Jul 15 11:32:22.519883 systemd[1]: Started systemd-networkd.service. Jul 15 11:32:22.520073 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 15 11:32:22.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.520978 systemd-networkd[1025]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:32:22.523279 systemd-networkd[1025]: eth0: Link UP Jul 15 11:32:22.523287 systemd-networkd[1025]: eth0: Gained carrier Jul 15 11:32:22.524067 kernel: ACPI: button: Power Button [PWRF] Jul 15 11:32:22.534173 systemd-networkd[1025]: eth0: DHCPv4 address 10.0.0.90/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:32:22.542000 audit[1038]: AVC avc: denied { confidentiality } for pid=1038 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 15 11:32:22.542000 audit[1038]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55577fed5250 a1=338ac a2=7f3fe382ebc5 a3=5 items=110 ppid=1019 pid=1038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:22.542000 audit: CWD cwd="/" Jul 15 11:32:22.542000 audit: PATH item=0 name=(null) inode=51 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=1 name=(null) inode=12195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=2 name=(null) inode=12195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=3 name=(null) inode=12196 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=4 name=(null) inode=12195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=5 name=(null) inode=12197 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=6 name=(null) inode=12195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=7 name=(null) inode=12198 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=8 name=(null) inode=12198 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=9 name=(null) inode=12199 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=10 name=(null) inode=12198 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=11 name=(null) inode=12200 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=12 name=(null) inode=12198 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=13 name=(null) inode=12201 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=14 name=(null) inode=12198 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=15 name=(null) inode=12202 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=16 name=(null) inode=12198 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=17 name=(null) inode=12203 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=18 name=(null) inode=12195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=19 name=(null) inode=12204 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=20 name=(null) inode=12204 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=21 name=(null) inode=12205 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=22 name=(null) inode=12204 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=23 name=(null) inode=12206 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=24 name=(null) inode=12204 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=25 name=(null) inode=12207 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=26 name=(null) inode=12204 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=27 name=(null) inode=12208 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=28 name=(null) inode=12204 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=29 name=(null) inode=12209 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=30 name=(null) inode=12195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=31 name=(null) inode=12210 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=32 name=(null) inode=12210 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=33 name=(null) inode=12211 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=34 name=(null) inode=12210 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=35 name=(null) inode=12212 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=36 name=(null) inode=12210 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=37 name=(null) inode=12213 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=38 name=(null) inode=12210 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=39 name=(null) inode=12214 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=40 name=(null) inode=12210 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=41 name=(null) inode=12215 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=42 name=(null) inode=12195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=43 name=(null) inode=12216 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=44 name=(null) inode=12216 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=45 name=(null) inode=12217 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=46 name=(null) inode=12216 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=47 name=(null) inode=12218 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=48 name=(null) inode=12216 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=49 name=(null) inode=12219 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=50 name=(null) inode=12216 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=51 name=(null) inode=12220 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=52 name=(null) inode=12216 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=53 name=(null) inode=12221 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=54 name=(null) inode=51 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=55 name=(null) inode=12222 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=56 name=(null) inode=12222 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=57 name=(null) inode=12223 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=58 name=(null) inode=12222 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=59 name=(null) inode=12224 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=60 name=(null) inode=12222 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=61 name=(null) inode=12225 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=62 name=(null) inode=12225 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=63 name=(null) inode=12226 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=64 name=(null) inode=12225 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=65 name=(null) inode=12227 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=66 name=(null) inode=12225 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=67 name=(null) inode=12228 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=68 name=(null) inode=12225 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=69 name=(null) inode=12229 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=70 name=(null) inode=12225 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=71 name=(null) inode=12230 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=72 name=(null) inode=12222 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=73 name=(null) inode=12231 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=74 name=(null) inode=12231 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=75 name=(null) inode=12232 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=76 name=(null) inode=12231 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=77 name=(null) inode=12233 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=78 name=(null) inode=12231 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=79 name=(null) inode=12234 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=80 name=(null) inode=12231 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=81 name=(null) inode=12235 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=82 name=(null) inode=12231 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=83 name=(null) inode=12236 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=84 name=(null) inode=12222 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=85 name=(null) inode=12237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=86 name=(null) inode=12237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=87 name=(null) inode=12238 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=88 name=(null) inode=12237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=89 name=(null) inode=12239 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=90 name=(null) inode=12237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=91 name=(null) inode=12240 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=92 name=(null) inode=12237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=93 name=(null) inode=12241 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=94 name=(null) inode=12237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=95 name=(null) inode=12242 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=96 name=(null) inode=12222 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=97 name=(null) inode=12243 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=98 name=(null) inode=12243 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=99 name=(null) inode=12244 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=100 name=(null) inode=12243 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=101 name=(null) inode=12245 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=102 name=(null) inode=12243 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=103 name=(null) inode=12246 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=104 name=(null) inode=12243 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=105 name=(null) inode=12247 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=106 name=(null) inode=12243 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=107 name=(null) inode=12248 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PATH item=109 name=(null) inode=12249 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:22.542000 audit: PROCTITLE proctitle="(udev-worker)" Jul 15 11:32:22.553067 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 15 11:32:22.566490 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Jul 15 11:32:22.585234 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 15 11:32:22.585358 kernel: mousedev: PS/2 mouse device common for all mice Jul 15 11:32:22.585373 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 15 11:32:22.585478 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 15 11:32:22.616630 kernel: kvm: Nested Virtualization enabled Jul 15 11:32:22.616682 kernel: SVM: kvm: Nested Paging enabled Jul 15 11:32:22.616701 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 15 11:32:22.616716 kernel: SVM: Virtual GIF supported Jul 15 11:32:22.633127 kernel: EDAC MC: Ver: 3.0.0 Jul 15 11:32:22.659433 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:32:22.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.661388 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:32:22.669777 lvm[1056]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:32:22.697189 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:32:22.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.698983 systemd[1]: Reached target cryptsetup.target. Jul 15 11:32:22.701525 systemd[1]: Starting lvm2-activation.service... Jul 15 11:32:22.706155 lvm[1057]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:32:22.732358 systemd[1]: Finished lvm2-activation.service. Jul 15 11:32:22.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.733417 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:32:22.734265 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:32:22.734291 systemd[1]: Reached target local-fs.target. Jul 15 11:32:22.735227 systemd[1]: Reached target machines.target. Jul 15 11:32:22.737238 systemd[1]: Starting ldconfig.service... Jul 15 11:32:22.738223 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:32:22.738292 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:32:22.739139 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:32:22.741024 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:32:22.743012 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:32:22.745024 systemd[1]: Starting systemd-sysext.service... Jul 15 11:32:22.746204 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1059 (bootctl) Jul 15 11:32:22.747719 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:32:22.755472 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:32:22.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.756890 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:32:22.784624 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:32:22.784832 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:32:23.004094 kernel: loop0: detected capacity change from 0 to 224512 Jul 15 11:32:23.014078 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:32:23.016402 systemd-fsck[1067]: fsck.fat 4.2 (2021-01-31) Jul 15 11:32:23.016402 systemd-fsck[1067]: /dev/vda1: 791 files, 120745/258078 clusters Jul 15 11:32:23.017730 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:32:23.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.020891 systemd[1]: Mounting boot.mount... Jul 15 11:32:23.029018 systemd[1]: Mounted boot.mount. Jul 15 11:32:23.034075 kernel: loop1: detected capacity change from 0 to 224512 Jul 15 11:32:23.039501 (sd-sysext)[1072]: Using extensions 'kubernetes'. Jul 15 11:32:23.039793 (sd-sysext)[1072]: Merged extensions into '/usr'. Jul 15 11:32:23.041802 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:32:23.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.049938 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:32:23.050445 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:32:23.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.054486 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:32:23.055637 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:32:23.056558 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.057553 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:32:23.059236 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:32:23.060906 systemd[1]: Starting modprobe@loop.service... Jul 15 11:32:23.061759 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.061874 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:32:23.061983 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:32:23.064271 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:32:23.065656 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:32:23.065804 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:32:23.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.067262 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:32:23.067421 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:32:23.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.068706 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:32:23.068842 systemd[1]: Finished modprobe@loop.service. Jul 15 11:32:23.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.070255 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:32:23.070368 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.071574 systemd[1]: Finished systemd-sysext.service. Jul 15 11:32:23.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.073377 systemd[1]: Starting ensure-sysext.service... Jul 15 11:32:23.074909 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:32:23.081036 systemd[1]: Reloading. Jul 15 11:32:23.086315 systemd-tmpfiles[1079]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:32:23.088784 systemd-tmpfiles[1079]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:32:23.092230 systemd-tmpfiles[1079]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:32:23.102435 ldconfig[1058]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:32:23.138321 /usr/lib/systemd/system-generators/torcx-generator[1099]: time="2025-07-15T11:32:23Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:32:23.138680 /usr/lib/systemd/system-generators/torcx-generator[1099]: time="2025-07-15T11:32:23Z" level=info msg="torcx already run" Jul 15 11:32:23.191069 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:32:23.191085 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:32:23.207435 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:32:23.258000 audit: BPF prog-id=27 op=LOAD Jul 15 11:32:23.259405 kernel: kauditd_printk_skb: 233 callbacks suppressed Jul 15 11:32:23.259462 kernel: audit: type=1334 audit(1752579143.258:161): prog-id=27 op=LOAD Jul 15 11:32:23.258000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:32:23.261326 kernel: audit: type=1334 audit(1752579143.258:162): prog-id=23 op=UNLOAD Jul 15 11:32:23.261355 kernel: audit: type=1334 audit(1752579143.259:163): prog-id=28 op=LOAD Jul 15 11:32:23.259000 audit: BPF prog-id=28 op=LOAD Jul 15 11:32:23.262260 kernel: audit: type=1334 audit(1752579143.261:164): prog-id=29 op=LOAD Jul 15 11:32:23.261000 audit: BPF prog-id=29 op=LOAD Jul 15 11:32:23.263215 kernel: audit: type=1334 audit(1752579143.261:165): prog-id=21 op=UNLOAD Jul 15 11:32:23.261000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:32:23.264169 kernel: audit: type=1334 audit(1752579143.261:166): prog-id=22 op=UNLOAD Jul 15 11:32:23.261000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:32:23.265146 kernel: audit: type=1334 audit(1752579143.264:167): prog-id=30 op=LOAD Jul 15 11:32:23.264000 audit: BPF prog-id=30 op=LOAD Jul 15 11:32:23.266089 kernel: audit: type=1334 audit(1752579143.264:168): prog-id=18 op=UNLOAD Jul 15 11:32:23.264000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:32:23.266000 audit: BPF prog-id=31 op=LOAD Jul 15 11:32:23.267988 kernel: audit: type=1334 audit(1752579143.266:169): prog-id=31 op=LOAD Jul 15 11:32:23.268006 kernel: audit: type=1334 audit(1752579143.267:170): prog-id=32 op=LOAD Jul 15 11:32:23.267000 audit: BPF prog-id=32 op=LOAD Jul 15 11:32:23.267000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:32:23.267000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:32:23.268000 audit: BPF prog-id=33 op=LOAD Jul 15 11:32:23.268000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:32:23.269000 audit: BPF prog-id=34 op=LOAD Jul 15 11:32:23.269000 audit: BPF prog-id=35 op=LOAD Jul 15 11:32:23.269000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:32:23.269000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:32:23.271389 systemd[1]: Finished ldconfig.service. Jul 15 11:32:23.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.273177 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:32:23.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.276800 systemd[1]: Starting audit-rules.service... Jul 15 11:32:23.278461 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:32:23.280399 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:32:23.282000 audit: BPF prog-id=36 op=LOAD Jul 15 11:32:23.282925 systemd[1]: Starting systemd-resolved.service... Jul 15 11:32:23.284000 audit: BPF prog-id=37 op=LOAD Jul 15 11:32:23.285121 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:32:23.286911 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:32:23.288469 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:32:23.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.291000 audit[1155]: SYSTEM_BOOT pid=1155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:32:23.294513 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.295790 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:32:23.297907 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:32:23.299973 systemd[1]: Starting modprobe@loop.service... Jul 15 11:32:23.300969 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.301414 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:32:23.301000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:32:23.301000 audit[1164]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcbe41f0b0 a2=420 a3=0 items=0 ppid=1142 pid=1164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:23.301000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:32:23.301716 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:32:23.302367 augenrules[1164]: No rules Jul 15 11:32:23.302818 systemd[1]: Finished audit-rules.service. Jul 15 11:32:23.304179 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:32:23.304280 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:32:23.305632 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:32:23.305724 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:32:23.307142 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:32:23.307255 systemd[1]: Finished modprobe@loop.service. Jul 15 11:32:23.309396 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:32:23.310890 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:32:23.313773 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.314767 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:32:23.316573 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:32:23.318441 systemd[1]: Starting modprobe@loop.service... Jul 15 11:32:23.319219 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.319326 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:32:23.320484 systemd[1]: Starting systemd-update-done.service... Jul 15 11:32:23.321375 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:32:23.322303 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:32:23.322410 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:32:23.323592 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:32:23.323684 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:32:23.324878 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:32:23.324971 systemd[1]: Finished modprobe@loop.service. Jul 15 11:32:23.326124 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:32:23.326203 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.326513 systemd[1]: Finished systemd-update-done.service. Jul 15 11:32:23.330046 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.331162 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:32:23.332804 systemd[1]: Starting modprobe@drm.service... Jul 15 11:32:23.334591 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:32:23.336548 systemd[1]: Starting modprobe@loop.service... Jul 15 11:32:23.337470 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.337602 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:32:23.338877 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:32:23.339950 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:32:23.340853 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:32:23.340952 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:32:23.342209 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:32:23.342310 systemd[1]: Finished modprobe@drm.service. Jul 15 11:32:23.343481 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:32:23.343571 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:32:23.344820 systemd-resolved[1150]: Positive Trust Anchors: Jul 15 11:32:23.344831 systemd-resolved[1150]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:32:23.344858 systemd-resolved[1150]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:32:23.344913 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:32:23.345003 systemd[1]: Finished modprobe@loop.service. Jul 15 11:32:23.348302 systemd[1]: Finished ensure-sysext.service. Jul 15 11:32:23.827623 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:32:23.827627 systemd-timesyncd[1152]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 15 11:32:23.827660 systemd-timesyncd[1152]: Initial clock synchronization to Tue 2025-07-15 11:32:23.827568 UTC. Jul 15 11:32:23.828863 systemd[1]: Reached target time-set.target. Jul 15 11:32:23.829776 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:32:23.829819 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.830632 systemd-resolved[1150]: Defaulting to hostname 'linux'. Jul 15 11:32:23.831900 systemd[1]: Started systemd-resolved.service. Jul 15 11:32:23.832750 systemd[1]: Reached target network.target. Jul 15 11:32:23.833572 systemd[1]: Reached target nss-lookup.target. Jul 15 11:32:23.834341 systemd[1]: Reached target sysinit.target. Jul 15 11:32:23.835174 systemd[1]: Started motdgen.path. Jul 15 11:32:23.835872 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:32:23.837071 systemd[1]: Started logrotate.timer. Jul 15 11:32:23.837842 systemd[1]: Started mdadm.timer. Jul 15 11:32:23.838544 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:32:23.839382 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:32:23.839409 systemd[1]: Reached target paths.target. Jul 15 11:32:23.840140 systemd[1]: Reached target timers.target. Jul 15 11:32:23.841196 systemd[1]: Listening on dbus.socket. Jul 15 11:32:23.842909 systemd[1]: Starting docker.socket... Jul 15 11:32:23.845688 systemd[1]: Listening on sshd.socket. Jul 15 11:32:23.846510 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:32:23.846845 systemd[1]: Listening on docker.socket. Jul 15 11:32:23.847615 systemd[1]: Reached target sockets.target. Jul 15 11:32:23.848361 systemd[1]: Reached target basic.target. Jul 15 11:32:23.849104 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.849128 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:32:23.849989 systemd[1]: Starting containerd.service... Jul 15 11:32:23.851513 systemd[1]: Starting dbus.service... Jul 15 11:32:23.852979 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:32:23.854658 systemd[1]: Starting extend-filesystems.service... Jul 15 11:32:23.855497 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:32:23.856414 systemd[1]: Starting motdgen.service... Jul 15 11:32:23.860333 systemd[1]: Starting prepare-helm.service... Jul 15 11:32:23.861962 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:32:23.863939 systemd[1]: Starting sshd-keygen.service... Jul 15 11:32:23.865061 dbus-daemon[1183]: [system] SELinux support is enabled Jul 15 11:32:23.871293 jq[1184]: false Jul 15 11:32:23.866777 systemd[1]: Starting systemd-logind.service... Jul 15 11:32:23.867507 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:32:23.880169 extend-filesystems[1185]: Found loop1 Jul 15 11:32:23.880169 extend-filesystems[1185]: Found sr0 Jul 15 11:32:23.880169 extend-filesystems[1185]: Found vda Jul 15 11:32:23.880169 extend-filesystems[1185]: Found vda1 Jul 15 11:32:23.880169 extend-filesystems[1185]: Found vda2 Jul 15 11:32:23.880169 extend-filesystems[1185]: Found vda3 Jul 15 11:32:23.880169 extend-filesystems[1185]: Found usr Jul 15 11:32:23.880169 extend-filesystems[1185]: Found vda4 Jul 15 11:32:23.880169 extend-filesystems[1185]: Found vda6 Jul 15 11:32:23.880169 extend-filesystems[1185]: Found vda7 Jul 15 11:32:23.880169 extend-filesystems[1185]: Found vda9 Jul 15 11:32:23.880169 extend-filesystems[1185]: Checking size of /dev/vda9 Jul 15 11:32:23.867564 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:32:23.911683 update_engine[1198]: I0715 11:32:23.893834 1198 main.cc:92] Flatcar Update Engine starting Jul 15 11:32:23.911683 update_engine[1198]: I0715 11:32:23.895371 1198 update_check_scheduler.cc:74] Next update check in 2m22s Jul 15 11:32:23.867857 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:32:23.911996 jq[1199]: true Jul 15 11:32:23.868358 systemd[1]: Starting update-engine.service... Jul 15 11:32:23.869884 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:32:23.912265 tar[1202]: linux-amd64/LICENSE Jul 15 11:32:23.912265 tar[1202]: linux-amd64/helm Jul 15 11:32:23.871127 systemd[1]: Started dbus.service. Jul 15 11:32:23.912525 jq[1203]: true Jul 15 11:32:23.874144 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:32:23.912664 env[1204]: time="2025-07-15T11:32:23.911330011Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:32:23.874315 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:32:23.875087 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:32:23.875235 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:32:23.877714 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:32:23.877741 systemd[1]: Reached target system-config.target. Jul 15 11:32:23.878881 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:32:23.878895 systemd[1]: Reached target user-config.target. Jul 15 11:32:23.879977 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:32:23.880106 systemd[1]: Finished motdgen.service. Jul 15 11:32:23.895350 systemd[1]: Started update-engine.service. Jul 15 11:32:23.898738 systemd[1]: Started locksmithd.service. Jul 15 11:32:23.917335 extend-filesystems[1185]: Resized partition /dev/vda9 Jul 15 11:32:23.918536 extend-filesystems[1237]: resize2fs 1.46.5 (30-Dec-2021) Jul 15 11:32:23.922202 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 15 11:32:23.922994 systemd-logind[1197]: Watching system buttons on /dev/input/event1 (Power Button) Jul 15 11:32:23.923021 systemd-logind[1197]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 15 11:32:23.923507 systemd-logind[1197]: New seat seat0. Jul 15 11:32:23.927926 systemd[1]: Started systemd-logind.service. Jul 15 11:32:23.942011 env[1204]: time="2025-07-15T11:32:23.941967585Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:32:23.942467 env[1204]: time="2025-07-15T11:32:23.942450090Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:32:23.943693 env[1204]: time="2025-07-15T11:32:23.943667282Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:32:23.943768 env[1204]: time="2025-07-15T11:32:23.943750928Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:32:23.944024 env[1204]: time="2025-07-15T11:32:23.944004444Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:32:23.944112 env[1204]: time="2025-07-15T11:32:23.944091647Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:32:23.944210 env[1204]: time="2025-07-15T11:32:23.944175374Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:32:23.944284 env[1204]: time="2025-07-15T11:32:23.944264181Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:32:23.944460 env[1204]: time="2025-07-15T11:32:23.944439720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:32:23.944721 env[1204]: time="2025-07-15T11:32:23.944703915Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:32:23.944888 env[1204]: time="2025-07-15T11:32:23.944869375Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:32:23.944962 env[1204]: time="2025-07-15T11:32:23.944944416Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:32:23.945068 env[1204]: time="2025-07-15T11:32:23.945050174Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:32:23.945145 env[1204]: time="2025-07-15T11:32:23.945126678Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:32:23.948205 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 15 11:32:23.975394 extend-filesystems[1237]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 15 11:32:23.975394 extend-filesystems[1237]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 15 11:32:23.975394 extend-filesystems[1237]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 15 11:32:23.984139 extend-filesystems[1185]: Resized filesystem in /dev/vda9 Jul 15 11:32:23.985643 bash[1236]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.977985496Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978018598Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978030621Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978056559Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978070305Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978083580Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978095192Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978108427Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978120179Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978132983Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978147850Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978158340Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978275450Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:32:23.985725 env[1204]: time="2025-07-15T11:32:23.978337847Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:32:23.978358 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978546959Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978567046Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978577596Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978618944Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978629133Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978639472Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978648509Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978658848Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978669388Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978678716Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978688274Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978702931Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978796887Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978809421Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.986094 env[1204]: time="2025-07-15T11:32:23.978821774Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.978522 systemd[1]: Finished extend-filesystems.service. Jul 15 11:32:23.986438 env[1204]: time="2025-07-15T11:32:23.978831292Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:32:23.986438 env[1204]: time="2025-07-15T11:32:23.978844747Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:32:23.986438 env[1204]: time="2025-07-15T11:32:23.978854635Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:32:23.986438 env[1204]: time="2025-07-15T11:32:23.978870285Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:32:23.986438 env[1204]: time="2025-07-15T11:32:23.978901092Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:32:23.979716 locksmithd[1218]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:32:23.983550 systemd[1]: Started containerd.service. Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979077854Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979123690Z" level=info msg="Connect containerd service" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979150630Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979697966Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979863917Z" level=info msg="Start subscribing containerd event" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979898081Z" level=info msg="Start recovering state" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979939449Z" level=info msg="Start event monitor" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979951041Z" level=info msg="Start snapshots syncer" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979957543Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.979963524Z" level=info msg="Start streaming server" Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.980169460Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.980223892Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:32:23.986735 env[1204]: time="2025-07-15T11:32:23.980285167Z" level=info msg="containerd successfully booted in 0.071338s" Jul 15 11:32:23.985899 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:32:24.263253 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:32:24.263311 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:32:24.280327 systemd-networkd[1025]: eth0: Gained IPv6LL Jul 15 11:32:24.282199 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:32:24.283506 systemd[1]: Reached target network-online.target. Jul 15 11:32:24.285769 systemd[1]: Starting kubelet.service... Jul 15 11:32:24.314664 tar[1202]: linux-amd64/README.md Jul 15 11:32:24.318317 systemd[1]: Finished prepare-helm.service. Jul 15 11:32:25.030583 systemd[1]: Started kubelet.service. Jul 15 11:32:25.084786 sshd_keygen[1213]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:32:25.102827 systemd[1]: Finished sshd-keygen.service. Jul 15 11:32:25.104909 systemd[1]: Starting issuegen.service... Jul 15 11:32:25.110150 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:32:25.110281 systemd[1]: Finished issuegen.service. Jul 15 11:32:25.112254 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:32:25.117298 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:32:25.119332 systemd[1]: Started getty@tty1.service. Jul 15 11:32:25.121071 systemd[1]: Started serial-getty@ttyS0.service. Jul 15 11:32:25.122119 systemd[1]: Reached target getty.target. Jul 15 11:32:25.123041 systemd[1]: Reached target multi-user.target. Jul 15 11:32:25.125743 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:32:25.135228 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:32:25.135469 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:32:25.136704 systemd[1]: Startup finished in 587ms (kernel) + 4.796s (initrd) + 6.160s (userspace) = 11.544s. Jul 15 11:32:25.904012 kubelet[1251]: E0715 11:32:25.903939 1251 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:32:25.905798 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:32:25.905916 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:32:25.906155 systemd[1]: kubelet.service: Consumed 1.530s CPU time. Jul 15 11:32:26.563513 systemd[1]: Created slice system-sshd.slice. Jul 15 11:32:26.564882 systemd[1]: Started sshd@0-10.0.0.90:22-10.0.0.1:54644.service. Jul 15 11:32:26.607758 sshd[1274]: Accepted publickey for core from 10.0.0.1 port 54644 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:26.609264 sshd[1274]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:26.616291 systemd[1]: Created slice user-500.slice. Jul 15 11:32:26.617324 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:32:26.618717 systemd-logind[1197]: New session 1 of user core. Jul 15 11:32:26.624861 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:32:26.626086 systemd[1]: Starting user@500.service... Jul 15 11:32:26.628872 (systemd)[1277]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:26.696675 systemd[1277]: Queued start job for default target default.target. Jul 15 11:32:26.697063 systemd[1277]: Reached target paths.target. Jul 15 11:32:26.697082 systemd[1277]: Reached target sockets.target. Jul 15 11:32:26.697094 systemd[1277]: Reached target timers.target. Jul 15 11:32:26.697105 systemd[1277]: Reached target basic.target. Jul 15 11:32:26.697137 systemd[1277]: Reached target default.target. Jul 15 11:32:26.697159 systemd[1277]: Startup finished in 62ms. Jul 15 11:32:26.697284 systemd[1]: Started user@500.service. Jul 15 11:32:26.698260 systemd[1]: Started session-1.scope. Jul 15 11:32:26.750514 systemd[1]: Started sshd@1-10.0.0.90:22-10.0.0.1:54656.service. Jul 15 11:32:26.779471 sshd[1286]: Accepted publickey for core from 10.0.0.1 port 54656 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:26.780772 sshd[1286]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:26.784246 systemd-logind[1197]: New session 2 of user core. Jul 15 11:32:26.785040 systemd[1]: Started session-2.scope. Jul 15 11:32:26.839506 sshd[1286]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:26.842226 systemd[1]: sshd@1-10.0.0.90:22-10.0.0.1:54656.service: Deactivated successfully. Jul 15 11:32:26.842732 systemd[1]: session-2.scope: Deactivated successfully. Jul 15 11:32:26.843199 systemd-logind[1197]: Session 2 logged out. Waiting for processes to exit. Jul 15 11:32:26.844147 systemd[1]: Started sshd@2-10.0.0.90:22-10.0.0.1:54668.service. Jul 15 11:32:26.844773 systemd-logind[1197]: Removed session 2. Jul 15 11:32:26.872163 sshd[1292]: Accepted publickey for core from 10.0.0.1 port 54668 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:26.873149 sshd[1292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:26.876328 systemd-logind[1197]: New session 3 of user core. Jul 15 11:32:26.877146 systemd[1]: Started session-3.scope. Jul 15 11:32:26.925504 sshd[1292]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:26.928017 systemd[1]: sshd@2-10.0.0.90:22-10.0.0.1:54668.service: Deactivated successfully. Jul 15 11:32:26.928517 systemd[1]: session-3.scope: Deactivated successfully. Jul 15 11:32:26.928934 systemd-logind[1197]: Session 3 logged out. Waiting for processes to exit. Jul 15 11:32:26.929777 systemd[1]: Started sshd@3-10.0.0.90:22-10.0.0.1:54670.service. Jul 15 11:32:26.930603 systemd-logind[1197]: Removed session 3. Jul 15 11:32:26.957975 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 54670 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:26.958978 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:26.961902 systemd-logind[1197]: New session 4 of user core. Jul 15 11:32:26.962596 systemd[1]: Started session-4.scope. Jul 15 11:32:27.014033 sshd[1298]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:27.016464 systemd[1]: sshd@3-10.0.0.90:22-10.0.0.1:54670.service: Deactivated successfully. Jul 15 11:32:27.016942 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:32:27.017413 systemd-logind[1197]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:32:27.018218 systemd[1]: Started sshd@4-10.0.0.90:22-10.0.0.1:54682.service. Jul 15 11:32:27.018794 systemd-logind[1197]: Removed session 4. Jul 15 11:32:27.046391 sshd[1304]: Accepted publickey for core from 10.0.0.1 port 54682 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:27.047434 sshd[1304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:27.050494 systemd-logind[1197]: New session 5 of user core. Jul 15 11:32:27.051344 systemd[1]: Started session-5.scope. Jul 15 11:32:27.107650 sudo[1307]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:32:27.107942 sudo[1307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:32:27.118441 dbus-daemon[1183]: \xd0=6\x99SV: received setenforce notice (enforcing=-869808352) Jul 15 11:32:27.120660 sudo[1307]: pam_unix(sudo:session): session closed for user root Jul 15 11:32:27.122531 sshd[1304]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:27.126676 systemd[1]: Started sshd@5-10.0.0.90:22-10.0.0.1:54696.service. Jul 15 11:32:27.182107 systemd[1]: sshd@4-10.0.0.90:22-10.0.0.1:54682.service: Deactivated successfully. Jul 15 11:32:27.182866 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:32:27.183559 systemd-logind[1197]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:32:27.184412 systemd-logind[1197]: Removed session 5. Jul 15 11:32:27.202053 sshd[1310]: Accepted publickey for core from 10.0.0.1 port 54696 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:27.203221 sshd[1310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:27.206549 systemd-logind[1197]: New session 6 of user core. Jul 15 11:32:27.207312 systemd[1]: Started session-6.scope. Jul 15 11:32:27.258671 sudo[1315]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:32:27.258912 sudo[1315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:32:27.261547 sudo[1315]: pam_unix(sudo:session): session closed for user root Jul 15 11:32:27.265929 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:32:27.266117 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:32:27.274112 systemd[1]: Stopping audit-rules.service... Jul 15 11:32:27.274000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:32:27.274000 audit[1318]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd2726d390 a2=420 a3=0 items=0 ppid=1 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:27.274000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:32:27.275422 auditctl[1318]: No rules Jul 15 11:32:27.275600 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:32:27.275731 systemd[1]: Stopped audit-rules.service. Jul 15 11:32:27.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.277137 systemd[1]: Starting audit-rules.service... Jul 15 11:32:27.292668 augenrules[1335]: No rules Jul 15 11:32:27.293265 systemd[1]: Finished audit-rules.service. Jul 15 11:32:27.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.294004 sudo[1314]: pam_unix(sudo:session): session closed for user root Jul 15 11:32:27.292000 audit[1314]: USER_END pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.292000 audit[1314]: CRED_DISP pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.295301 sshd[1310]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:27.294000 audit[1310]: USER_END pid=1310 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.294000 audit[1310]: CRED_DISP pid=1310 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.297936 systemd[1]: sshd@5-10.0.0.90:22-10.0.0.1:54696.service: Deactivated successfully. Jul 15 11:32:27.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.90:22-10.0.0.1:54696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.298435 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:32:27.298879 systemd-logind[1197]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:32:27.299800 systemd[1]: Started sshd@6-10.0.0.90:22-10.0.0.1:54698.service. Jul 15 11:32:27.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.90:22-10.0.0.1:54698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.300473 systemd-logind[1197]: Removed session 6. Jul 15 11:32:27.326000 audit[1341]: USER_ACCT pid=1341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.328016 sshd[1341]: Accepted publickey for core from 10.0.0.1 port 54698 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:27.327000 audit[1341]: CRED_ACQ pid=1341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.327000 audit[1341]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe698f25d0 a2=3 a3=0 items=0 ppid=1 pid=1341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:27.327000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:27.329146 sshd[1341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:27.332111 systemd-logind[1197]: New session 7 of user core. Jul 15 11:32:27.332818 systemd[1]: Started session-7.scope. Jul 15 11:32:27.334000 audit[1341]: USER_START pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.336000 audit[1343]: CRED_ACQ pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.382000 audit[1344]: USER_ACCT pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.382000 audit[1344]: CRED_REFR pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.384004 sudo[1344]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:32:27.384174 sudo[1344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:32:27.384000 audit[1344]: USER_START pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.418588 systemd[1]: Starting docker.service... Jul 15 11:32:27.520412 env[1355]: time="2025-07-15T11:32:27.520345616Z" level=info msg="Starting up" Jul 15 11:32:27.521896 env[1355]: time="2025-07-15T11:32:27.521844055Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:32:27.521896 env[1355]: time="2025-07-15T11:32:27.521878129Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:32:27.522046 env[1355]: time="2025-07-15T11:32:27.521907344Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:32:27.522046 env[1355]: time="2025-07-15T11:32:27.521923694Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:32:27.523656 env[1355]: time="2025-07-15T11:32:27.523631286Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:32:27.523656 env[1355]: time="2025-07-15T11:32:27.523650562Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:32:27.523721 env[1355]: time="2025-07-15T11:32:27.523664628Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:32:27.523721 env[1355]: time="2025-07-15T11:32:27.523674186Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:32:29.261715 env[1355]: time="2025-07-15T11:32:29.261667032Z" level=info msg="Loading containers: start." Jul 15 11:32:29.309000 audit[1389]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.311865 kernel: kauditd_printk_skb: 38 callbacks suppressed Jul 15 11:32:29.311908 kernel: audit: type=1325 audit(1752579149.309:203): table=nat:2 family=2 entries=2 op=nft_register_chain pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.309000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd0d6e5d70 a2=0 a3=7ffd0d6e5d5c items=0 ppid=1355 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.318223 kernel: audit: type=1300 audit(1752579149.309:203): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd0d6e5d70 a2=0 a3=7ffd0d6e5d5c items=0 ppid=1355 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.318302 kernel: audit: type=1327 audit(1752579149.309:203): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:32:29.309000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:32:29.314000 audit[1391]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.322344 kernel: audit: type=1325 audit(1752579149.314:204): table=filter:3 family=2 entries=2 op=nft_register_chain pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.322397 kernel: audit: type=1300 audit(1752579149.314:204): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffced18d020 a2=0 a3=7ffced18d00c items=0 ppid=1355 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.314000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffced18d020 a2=0 a3=7ffced18d00c items=0 ppid=1355 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.326744 kernel: audit: type=1327 audit(1752579149.314:204): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:32:29.314000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:32:29.328630 kernel: audit: type=1325 audit(1752579149.316:205): table=filter:4 family=2 entries=1 op=nft_register_chain pid=1393 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.316000 audit[1393]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1393 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.330676 kernel: audit: type=1300 audit(1752579149.316:205): arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdc1754de0 a2=0 a3=7ffdc1754dcc items=0 ppid=1355 pid=1393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.316000 audit[1393]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdc1754de0 a2=0 a3=7ffdc1754dcc items=0 ppid=1355 pid=1393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.334916 kernel: audit: type=1327 audit(1752579149.316:205): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:32:29.316000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:32:29.337208 kernel: audit: type=1325 audit(1752579149.317:206): table=filter:5 family=2 entries=1 op=nft_register_chain pid=1395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.317000 audit[1395]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.317000 audit[1395]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffefcf8b030 a2=0 a3=7ffefcf8b01c items=0 ppid=1355 pid=1395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.317000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:32:29.319000 audit[1397]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.319000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd36251f70 a2=0 a3=7ffd36251f5c items=0 ppid=1355 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.319000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:32:29.354000 audit[1402]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.354000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffeaa29c7f0 a2=0 a3=7ffeaa29c7dc items=0 ppid=1355 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.354000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:32:29.363000 audit[1404]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.363000 audit[1404]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcb0b934f0 a2=0 a3=7ffcb0b934dc items=0 ppid=1355 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.363000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:32:29.365000 audit[1406]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.365000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffced2faf50 a2=0 a3=7ffced2faf3c items=0 ppid=1355 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.365000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:32:29.367000 audit[1408]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.367000 audit[1408]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffed488c490 a2=0 a3=7ffed488c47c items=0 ppid=1355 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.367000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:32:29.765000 audit[1412]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.765000 audit[1412]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff9cb4dcf0 a2=0 a3=7fff9cb4dcdc items=0 ppid=1355 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.765000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:32:29.770000 audit[1413]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.770000 audit[1413]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc09b3bc10 a2=0 a3=7ffc09b3bbfc items=0 ppid=1355 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.770000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:32:29.813206 kernel: Initializing XFRM netlink socket Jul 15 11:32:29.840133 env[1355]: time="2025-07-15T11:32:29.840087824Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:32:29.856000 audit[1421]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.856000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffdb2fd4f30 a2=0 a3=7ffdb2fd4f1c items=0 ppid=1355 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.856000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:32:29.870000 audit[1424]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.870000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdd07c8490 a2=0 a3=7ffdd07c847c items=0 ppid=1355 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.870000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:32:29.872000 audit[1427]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.872000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe9daaf410 a2=0 a3=7ffe9daaf3fc items=0 ppid=1355 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.872000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:32:29.874000 audit[1429]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.874000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffed29be480 a2=0 a3=7ffed29be46c items=0 ppid=1355 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.874000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:32:29.875000 audit[1431]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.875000 audit[1431]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffcaaecc190 a2=0 a3=7ffcaaecc17c items=0 ppid=1355 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.875000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:32:29.877000 audit[1433]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.877000 audit[1433]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd145d0e40 a2=0 a3=7ffd145d0e2c items=0 ppid=1355 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.877000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:32:29.878000 audit[1435]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.878000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffcdae4ff40 a2=0 a3=7ffcdae4ff2c items=0 ppid=1355 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.878000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:32:29.885000 audit[1438]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.885000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe3d8f2700 a2=0 a3=7ffe3d8f26ec items=0 ppid=1355 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.885000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:32:29.886000 audit[1440]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.886000 audit[1440]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff5350b2c0 a2=0 a3=7fff5350b2ac items=0 ppid=1355 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.886000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:32:29.888000 audit[1442]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.888000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffffab172d0 a2=0 a3=7ffffab172bc items=0 ppid=1355 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.888000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:32:29.890000 audit[1444]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:29.890000 audit[1444]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffccade1cb0 a2=0 a3=7ffccade1c9c items=0 ppid=1355 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:29.890000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:32:29.891964 systemd-networkd[1025]: docker0: Link UP Jul 15 11:32:30.354000 audit[1448]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:30.354000 audit[1448]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffda3290ef0 a2=0 a3=7ffda3290edc items=0 ppid=1355 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.354000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:32:30.358000 audit[1449]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:30.358000 audit[1449]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcefed15d0 a2=0 a3=7ffcefed15bc items=0 ppid=1355 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.358000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:32:30.360538 env[1355]: time="2025-07-15T11:32:30.360436933Z" level=info msg="Loading containers: done." Jul 15 11:32:30.383002 env[1355]: time="2025-07-15T11:32:30.382923607Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:32:30.383281 env[1355]: time="2025-07-15T11:32:30.383133531Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:32:30.383281 env[1355]: time="2025-07-15T11:32:30.383264697Z" level=info msg="Daemon has completed initialization" Jul 15 11:32:30.401636 systemd[1]: Started docker.service. Jul 15 11:32:30.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:30.410373 env[1355]: time="2025-07-15T11:32:30.410312502Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:32:31.204662 env[1204]: time="2025-07-15T11:32:31.204604606Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 15 11:32:31.803332 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1168041653.mount: Deactivated successfully. Jul 15 11:32:33.678357 env[1204]: time="2025-07-15T11:32:33.678293088Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:33.681252 env[1204]: time="2025-07-15T11:32:33.681209756Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:33.685437 env[1204]: time="2025-07-15T11:32:33.685387728Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:33.687448 env[1204]: time="2025-07-15T11:32:33.687410480Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:33.688273 env[1204]: time="2025-07-15T11:32:33.688240576Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9\"" Jul 15 11:32:33.689122 env[1204]: time="2025-07-15T11:32:33.689096290Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 15 11:32:36.156726 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:32:36.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:36.156911 systemd[1]: Stopped kubelet.service. Jul 15 11:32:36.156967 systemd[1]: kubelet.service: Consumed 1.530s CPU time. Jul 15 11:32:36.169798 kernel: kauditd_printk_skb: 63 callbacks suppressed Jul 15 11:32:36.169889 kernel: audit: type=1130 audit(1752579156.155:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:36.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:36.175874 kernel: audit: type=1131 audit(1752579156.155:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:36.188089 systemd[1]: Starting kubelet.service... Jul 15 11:32:36.293968 systemd[1]: Started kubelet.service. Jul 15 11:32:36.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:36.298213 kernel: audit: type=1130 audit(1752579156.293:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:36.409768 kubelet[1491]: E0715 11:32:36.409624 1491 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:32:36.412631 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:32:36.412781 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:32:36.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:32:36.417211 kernel: audit: type=1131 audit(1752579156.411:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:32:38.045547 env[1204]: time="2025-07-15T11:32:38.045439127Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:38.048817 env[1204]: time="2025-07-15T11:32:38.048748291Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:38.050963 env[1204]: time="2025-07-15T11:32:38.050929951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:38.056008 env[1204]: time="2025-07-15T11:32:38.053296577Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:38.056008 env[1204]: time="2025-07-15T11:32:38.054544176Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de\"" Jul 15 11:32:38.056008 env[1204]: time="2025-07-15T11:32:38.055386645Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 15 11:32:39.636448 env[1204]: time="2025-07-15T11:32:39.636374393Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:39.638245 env[1204]: time="2025-07-15T11:32:39.638211146Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:39.640264 env[1204]: time="2025-07-15T11:32:39.640214702Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:39.641984 env[1204]: time="2025-07-15T11:32:39.641915090Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:39.642522 env[1204]: time="2025-07-15T11:32:39.642488074Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2\"" Jul 15 11:32:39.643067 env[1204]: time="2025-07-15T11:32:39.643038566Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 15 11:32:41.429687 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount980785756.mount: Deactivated successfully. Jul 15 11:32:42.836452 env[1204]: time="2025-07-15T11:32:42.836372476Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:43.005623 env[1204]: time="2025-07-15T11:32:43.005540676Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:43.080399 env[1204]: time="2025-07-15T11:32:43.080322305Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:43.107909 env[1204]: time="2025-07-15T11:32:43.107760302Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:43.108388 env[1204]: time="2025-07-15T11:32:43.108344927Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02\"" Jul 15 11:32:43.108976 env[1204]: time="2025-07-15T11:32:43.108934272Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 15 11:32:44.700966 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2491481642.mount: Deactivated successfully. Jul 15 11:32:46.360743 env[1204]: time="2025-07-15T11:32:46.360666679Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:46.362965 env[1204]: time="2025-07-15T11:32:46.362915164Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:46.364945 env[1204]: time="2025-07-15T11:32:46.364890297Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:46.367017 env[1204]: time="2025-07-15T11:32:46.366976989Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:46.367794 env[1204]: time="2025-07-15T11:32:46.367746151Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 15 11:32:46.368400 env[1204]: time="2025-07-15T11:32:46.368366664Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:32:46.649432 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:32:46.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:46.649642 systemd[1]: Stopped kubelet.service. Jul 15 11:32:46.651228 systemd[1]: Starting kubelet.service... Jul 15 11:32:46.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:46.656109 kernel: audit: type=1130 audit(1752579166.648:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:46.656162 kernel: audit: type=1131 audit(1752579166.648:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:46.739516 systemd[1]: Started kubelet.service. Jul 15 11:32:46.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:46.743226 kernel: audit: type=1130 audit(1752579166.738:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:46.792139 kubelet[1502]: E0715 11:32:46.792085 1502 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:32:46.794147 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:32:46.794282 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:32:46.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:32:46.798510 kernel: audit: type=1131 audit(1752579166.793:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:32:48.192396 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2019662294.mount: Deactivated successfully. Jul 15 11:32:48.198298 env[1204]: time="2025-07-15T11:32:48.198255532Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:48.200103 env[1204]: time="2025-07-15T11:32:48.200073420Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:48.201658 env[1204]: time="2025-07-15T11:32:48.201622133Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:48.202956 env[1204]: time="2025-07-15T11:32:48.202896903Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:48.203334 env[1204]: time="2025-07-15T11:32:48.203301491Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 15 11:32:48.203980 env[1204]: time="2025-07-15T11:32:48.203952892Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 15 11:32:49.938764 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1127908125.mount: Deactivated successfully. Jul 15 11:32:53.931407 env[1204]: time="2025-07-15T11:32:53.931348023Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:53.935197 env[1204]: time="2025-07-15T11:32:53.935142236Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:53.938392 env[1204]: time="2025-07-15T11:32:53.938358525Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:53.940896 env[1204]: time="2025-07-15T11:32:53.940862860Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:53.942587 env[1204]: time="2025-07-15T11:32:53.942541046Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Jul 15 11:32:55.792320 systemd[1]: Stopped kubelet.service. Jul 15 11:32:55.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:55.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:55.795969 systemd[1]: Starting kubelet.service... Jul 15 11:32:55.798862 kernel: audit: type=1130 audit(1752579175.791:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:55.798942 kernel: audit: type=1131 audit(1752579175.792:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:55.817484 systemd[1]: Reloading. Jul 15 11:32:55.896269 /usr/lib/systemd/system-generators/torcx-generator[1556]: time="2025-07-15T11:32:55Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:32:55.896609 /usr/lib/systemd/system-generators/torcx-generator[1556]: time="2025-07-15T11:32:55Z" level=info msg="torcx already run" Jul 15 11:32:56.453672 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:32:56.453689 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:32:56.471357 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:32:56.544121 kernel: audit: type=1400 audit(1752579176.530:238): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.544274 kernel: audit: type=1400 audit(1752579176.530:239): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.544293 kernel: audit: type=1400 audit(1752579176.530:240): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.544310 kernel: audit: type=1400 audit(1752579176.530:241): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550658 kernel: audit: type=1400 audit(1752579176.530:242): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550717 kernel: audit: type=1400 audit(1752579176.530:243): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550736 kernel: audit: type=1400 audit(1752579176.530:244): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.553729 kernel: audit: type=1400 audit(1752579176.530:245): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.536000 audit: BPF prog-id=43 op=LOAD Jul 15 11:32:56.536000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.539000 audit: BPF prog-id=44 op=LOAD Jul 15 11:32:56.539000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:32:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.542000 audit: BPF prog-id=45 op=LOAD Jul 15 11:32:56.542000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit: BPF prog-id=46 op=LOAD Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.549000 audit: BPF prog-id=47 op=LOAD Jul 15 11:32:56.549000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:32:56.549000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:32:56.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit: BPF prog-id=48 op=LOAD Jul 15 11:32:56.555000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit: BPF prog-id=49 op=LOAD Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.555000 audit: BPF prog-id=50 op=LOAD Jul 15 11:32:56.555000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:32:56.555000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:32:56.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit: BPF prog-id=51 op=LOAD Jul 15 11:32:56.556000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.556000 audit: BPF prog-id=52 op=LOAD Jul 15 11:32:56.556000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit: BPF prog-id=53 op=LOAD Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.557000 audit: BPF prog-id=54 op=LOAD Jul 15 11:32:56.557000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:32:56.557000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit: BPF prog-id=55 op=LOAD Jul 15 11:32:56.558000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit: BPF prog-id=56 op=LOAD Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:56.558000 audit: BPF prog-id=57 op=LOAD Jul 15 11:32:56.558000 audit: BPF prog-id=39 op=UNLOAD Jul 15 11:32:56.558000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:32:56.570366 systemd[1]: Started kubelet.service. Jul 15 11:32:56.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:56.571702 systemd[1]: Stopping kubelet.service... Jul 15 11:32:56.571924 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:32:56.572061 systemd[1]: Stopped kubelet.service. Jul 15 11:32:56.570000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:56.573591 systemd[1]: Starting kubelet.service... Jul 15 11:32:56.659265 systemd[1]: Started kubelet.service. Jul 15 11:32:56.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:56.716013 kubelet[1605]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:32:56.716013 kubelet[1605]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:32:56.716013 kubelet[1605]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:32:56.716385 kubelet[1605]: I0715 11:32:56.716111 1605 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:32:57.091429 kubelet[1605]: I0715 11:32:57.091316 1605 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 15 11:32:57.091429 kubelet[1605]: I0715 11:32:57.091348 1605 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:32:57.091657 kubelet[1605]: I0715 11:32:57.091634 1605 server.go:954] "Client rotation is on, will bootstrap in background" Jul 15 11:32:57.121205 kubelet[1605]: E0715 11:32:57.121155 1605 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.90:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:57.122359 kubelet[1605]: I0715 11:32:57.122321 1605 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:32:57.127730 kubelet[1605]: E0715 11:32:57.127700 1605 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:32:57.127777 kubelet[1605]: I0715 11:32:57.127733 1605 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:32:57.131412 kubelet[1605]: I0715 11:32:57.131386 1605 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:32:57.131674 kubelet[1605]: I0715 11:32:57.131641 1605 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:32:57.131859 kubelet[1605]: I0715 11:32:57.131666 1605 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:32:57.131949 kubelet[1605]: I0715 11:32:57.131869 1605 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:32:57.131949 kubelet[1605]: I0715 11:32:57.131879 1605 container_manager_linux.go:304] "Creating device plugin manager" Jul 15 11:32:57.132013 kubelet[1605]: I0715 11:32:57.132001 1605 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:32:57.135207 kubelet[1605]: I0715 11:32:57.135189 1605 kubelet.go:446] "Attempting to sync node with API server" Jul 15 11:32:57.135249 kubelet[1605]: I0715 11:32:57.135234 1605 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:32:57.135280 kubelet[1605]: I0715 11:32:57.135267 1605 kubelet.go:352] "Adding apiserver pod source" Jul 15 11:32:57.135303 kubelet[1605]: I0715 11:32:57.135283 1605 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:32:57.151290 kubelet[1605]: W0715 11:32:57.151218 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.90:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:32:57.151290 kubelet[1605]: E0715 11:32:57.151289 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.90:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:57.161416 kubelet[1605]: I0715 11:32:57.161396 1605 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:32:57.161559 kubelet[1605]: W0715 11:32:57.161510 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.90:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:32:57.161667 kubelet[1605]: E0715 11:32:57.161644 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.90:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:57.162051 kubelet[1605]: I0715 11:32:57.162033 1605 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:32:57.163926 kubelet[1605]: W0715 11:32:57.163901 1605 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:32:57.168420 kubelet[1605]: I0715 11:32:57.168391 1605 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:32:57.168466 kubelet[1605]: I0715 11:32:57.168439 1605 server.go:1287] "Started kubelet" Jul 15 11:32:57.170268 kubelet[1605]: I0715 11:32:57.170209 1605 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:32:57.170599 kubelet[1605]: I0715 11:32:57.170580 1605 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:32:57.169000 audit[1605]: AVC avc: denied { mac_admin } for pid=1605 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:57.169000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:32:57.169000 audit[1605]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a88de0 a1=c000711140 a2=c000a88db0 a3=25 items=0 ppid=1 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.169000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:32:57.171069 kubelet[1605]: I0715 11:32:57.170614 1605 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:32:57.171209 kubelet[1605]: I0715 11:32:57.171098 1605 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:32:57.171238 kubelet[1605]: I0715 11:32:57.171209 1605 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:32:57.171292 kubelet[1605]: I0715 11:32:57.170892 1605 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:32:57.169000 audit[1605]: AVC avc: denied { mac_admin } for pid=1605 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:57.169000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:32:57.169000 audit[1605]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a36a60 a1=c000d10870 a2=c000926840 a3=25 items=0 ppid=1 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.169000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:32:57.172130 kubelet[1605]: I0715 11:32:57.172107 1605 server.go:479] "Adding debug handlers to kubelet server" Jul 15 11:32:57.173056 kubelet[1605]: I0715 11:32:57.173024 1605 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:32:57.172000 audit[1619]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:57.172000 audit[1619]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffea956850 a2=0 a3=7fffea95683c items=0 ppid=1605 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.172000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:32:57.173000 audit[1620]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:57.173000 audit[1620]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc46900a0 a2=0 a3=7ffdc469008c items=0 ppid=1605 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.173000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:32:57.176130 kubelet[1605]: I0715 11:32:57.176103 1605 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:32:57.176419 kubelet[1605]: E0715 11:32:57.176392 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:57.176000 audit[1622]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:57.176000 audit[1622]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffac3a9980 a2=0 a3=7fffac3a996c items=0 ppid=1605 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.176000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:32:57.178339 kubelet[1605]: E0715 11:32:57.178313 1605 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.90:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.90:6443: connect: connection refused" interval="200ms" Jul 15 11:32:57.178650 kubelet[1605]: I0715 11:32:57.178634 1605 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:32:57.179056 kubelet[1605]: I0715 11:32:57.179034 1605 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:32:57.179237 kubelet[1605]: I0715 11:32:57.179211 1605 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:32:57.179587 kubelet[1605]: I0715 11:32:57.179086 1605 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:32:57.178000 audit[1624]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:57.178000 audit[1624]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdb9bef710 a2=0 a3=7ffdb9bef6fc items=0 ppid=1605 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.178000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:32:57.180456 kubelet[1605]: W0715 11:32:57.180412 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.90:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:32:57.180511 kubelet[1605]: E0715 11:32:57.180457 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.90:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:57.180587 kubelet[1605]: I0715 11:32:57.180558 1605 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:32:57.185247 kubelet[1605]: E0715 11:32:57.184322 1605 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.90:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.90:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18526979dfdea2e0 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:32:57.168413408 +0000 UTC m=+0.505292335,LastTimestamp:2025-07-15 11:32:57.168413408 +0000 UTC m=+0.505292335,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:32:57.186000 audit[1627]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:57.186000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc22d9ee50 a2=0 a3=7ffc22d9ee3c items=0 ppid=1605 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.186000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:32:57.188370 kubelet[1605]: I0715 11:32:57.188328 1605 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:32:57.187000 audit[1629]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:57.187000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe1144d150 a2=0 a3=7ffe1144d13c items=0 ppid=1605 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.187000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:32:57.189099 kubelet[1605]: I0715 11:32:57.189090 1605 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:32:57.189129 kubelet[1605]: I0715 11:32:57.189117 1605 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 15 11:32:57.189154 kubelet[1605]: I0715 11:32:57.189143 1605 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:32:57.189154 kubelet[1605]: I0715 11:32:57.189154 1605 kubelet.go:2382] "Starting kubelet main sync loop" Jul 15 11:32:57.189235 kubelet[1605]: E0715 11:32:57.189214 1605 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:32:57.188000 audit[1630]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:57.188000 audit[1630]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc2d321f60 a2=0 a3=7ffc2d321f4c items=0 ppid=1605 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.188000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:32:57.190000 audit[1632]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:57.190000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff17baadf0 a2=0 a3=7fff17baaddc items=0 ppid=1605 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.190000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:32:57.191000 audit[1634]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:32:57.191000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffedf3f7a70 a2=0 a3=7ffedf3f7a5c items=0 ppid=1605 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.191000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:32:57.191000 audit[1635]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:57.191000 audit[1635]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffad830690 a2=0 a3=7fffad83067c items=0 ppid=1605 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:32:57.191000 audit[1636]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:57.191000 audit[1636]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd292da970 a2=0 a3=7ffd292da95c items=0 ppid=1605 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:32:57.193412 kubelet[1605]: W0715 11:32:57.193354 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.90:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:32:57.193412 kubelet[1605]: E0715 11:32:57.193405 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.90:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:57.192000 audit[1637]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:32:57.192000 audit[1637]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffca0f1ae00 a2=0 a3=7ffca0f1adec items=0 ppid=1605 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:57.192000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:32:57.194436 kubelet[1605]: I0715 11:32:57.194420 1605 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:32:57.194521 kubelet[1605]: I0715 11:32:57.194505 1605 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:32:57.194620 kubelet[1605]: I0715 11:32:57.194600 1605 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:32:57.276826 kubelet[1605]: E0715 11:32:57.276790 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:57.290242 kubelet[1605]: E0715 11:32:57.290202 1605 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:32:57.377598 kubelet[1605]: E0715 11:32:57.377450 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:57.379121 kubelet[1605]: E0715 11:32:57.379072 1605 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.90:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.90:6443: connect: connection refused" interval="400ms" Jul 15 11:32:57.478584 kubelet[1605]: E0715 11:32:57.478489 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:57.491018 kubelet[1605]: E0715 11:32:57.490977 1605 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:32:57.579516 kubelet[1605]: E0715 11:32:57.579456 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:57.680507 kubelet[1605]: E0715 11:32:57.680452 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:57.780662 kubelet[1605]: E0715 11:32:57.780577 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:57.780662 kubelet[1605]: E0715 11:32:57.780660 1605 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.90:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.90:6443: connect: connection refused" interval="800ms" Jul 15 11:32:57.881318 kubelet[1605]: E0715 11:32:57.881245 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:57.891766 kubelet[1605]: E0715 11:32:57.891698 1605 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:32:57.982595 kubelet[1605]: E0715 11:32:57.982435 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:58.083331 kubelet[1605]: E0715 11:32:58.083253 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:58.168383 kubelet[1605]: I0715 11:32:58.168336 1605 policy_none.go:49] "None policy: Start" Jul 15 11:32:58.168486 kubelet[1605]: I0715 11:32:58.168399 1605 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:32:58.168486 kubelet[1605]: I0715 11:32:58.168427 1605 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:32:58.184172 kubelet[1605]: E0715 11:32:58.184109 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:58.285410 kubelet[1605]: E0715 11:32:58.285239 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:58.344076 kubelet[1605]: W0715 11:32:58.344000 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.90:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:32:58.344269 kubelet[1605]: E0715 11:32:58.344094 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.90:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:58.385880 kubelet[1605]: E0715 11:32:58.385787 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:58.486656 kubelet[1605]: E0715 11:32:58.486588 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:58.512524 kubelet[1605]: W0715 11:32:58.512472 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.90:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:32:58.512714 kubelet[1605]: E0715 11:32:58.512527 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.90:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:58.562548 kubelet[1605]: W0715 11:32:58.562412 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.90:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:32:58.562548 kubelet[1605]: E0715 11:32:58.562468 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.90:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:58.567112 kubelet[1605]: E0715 11:32:58.567005 1605 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.90:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.90:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18526979dfdea2e0 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:32:57.168413408 +0000 UTC m=+0.505292335,LastTimestamp:2025-07-15 11:32:57.168413408 +0000 UTC m=+0.505292335,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:32:58.581803 kubelet[1605]: E0715 11:32:58.581758 1605 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.90:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.90:6443: connect: connection refused" interval="1.6s" Jul 15 11:32:58.586908 kubelet[1605]: E0715 11:32:58.586851 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:58.602552 kubelet[1605]: W0715 11:32:58.602509 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.90:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:32:58.602609 kubelet[1605]: E0715 11:32:58.602554 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.90:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:58.687590 kubelet[1605]: E0715 11:32:58.687538 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:58.691868 kubelet[1605]: E0715 11:32:58.691831 1605 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:32:58.788495 kubelet[1605]: E0715 11:32:58.788414 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:32:58.794063 systemd[1]: Created slice kubepods.slice. Jul 15 11:32:58.797519 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:32:58.814079 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:32:58.815224 kubelet[1605]: I0715 11:32:58.815207 1605 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:32:58.814000 audit[1605]: AVC avc: denied { mac_admin } for pid=1605 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:58.814000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:32:58.814000 audit[1605]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ec5aa0 a1=c00101e228 a2=c000ec5a70 a3=25 items=0 ppid=1 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:58.814000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:32:58.815557 kubelet[1605]: I0715 11:32:58.815398 1605 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:32:58.815878 kubelet[1605]: I0715 11:32:58.815866 1605 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:32:58.815941 kubelet[1605]: I0715 11:32:58.815882 1605 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:32:58.816167 kubelet[1605]: I0715 11:32:58.816145 1605 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:32:58.817004 kubelet[1605]: E0715 11:32:58.816989 1605 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:32:58.817108 kubelet[1605]: E0715 11:32:58.817084 1605 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:32:58.917485 kubelet[1605]: I0715 11:32:58.917458 1605 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:32:58.917877 kubelet[1605]: E0715 11:32:58.917835 1605 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.90:6443/api/v1/nodes\": dial tcp 10.0.0.90:6443: connect: connection refused" node="localhost" Jul 15 11:32:59.119563 kubelet[1605]: I0715 11:32:59.119460 1605 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:32:59.119985 kubelet[1605]: E0715 11:32:59.119917 1605 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.90:6443/api/v1/nodes\": dial tcp 10.0.0.90:6443: connect: connection refused" node="localhost" Jul 15 11:32:59.231997 kubelet[1605]: E0715 11:32:59.231959 1605 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.90:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:32:59.521500 kubelet[1605]: I0715 11:32:59.521456 1605 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:32:59.521936 kubelet[1605]: E0715 11:32:59.521890 1605 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.90:6443/api/v1/nodes\": dial tcp 10.0.0.90:6443: connect: connection refused" node="localhost" Jul 15 11:33:00.182465 kubelet[1605]: E0715 11:33:00.182423 1605 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.90:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.90:6443: connect: connection refused" interval="3.2s" Jul 15 11:33:00.301625 systemd[1]: Created slice kubepods-burstable-pod4777b67ba28571d45868a1b15fdc7578.slice. Jul 15 11:33:00.307802 kubelet[1605]: E0715 11:33:00.307763 1605 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:33:00.309271 systemd[1]: Created slice kubepods-burstable-podd1af03769b64da1b1e8089a7035018fc.slice. Jul 15 11:33:00.322679 kubelet[1605]: E0715 11:33:00.322647 1605 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:33:00.322806 kubelet[1605]: I0715 11:33:00.322779 1605 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:33:00.323223 kubelet[1605]: E0715 11:33:00.323193 1605 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.90:6443/api/v1/nodes\": dial tcp 10.0.0.90:6443: connect: connection refused" node="localhost" Jul 15 11:33:00.325217 systemd[1]: Created slice kubepods-burstable-pod8a75e163f27396b2168da0f88f85f8a5.slice. Jul 15 11:33:00.326769 kubelet[1605]: E0715 11:33:00.326741 1605 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:33:00.400637 kubelet[1605]: I0715 11:33:00.400569 1605 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:00.400810 kubelet[1605]: I0715 11:33:00.400648 1605 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:00.400810 kubelet[1605]: I0715 11:33:00.400686 1605 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:00.400810 kubelet[1605]: I0715 11:33:00.400722 1605 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:33:00.400810 kubelet[1605]: I0715 11:33:00.400763 1605 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4777b67ba28571d45868a1b15fdc7578-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"4777b67ba28571d45868a1b15fdc7578\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:00.400930 kubelet[1605]: I0715 11:33:00.400813 1605 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4777b67ba28571d45868a1b15fdc7578-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"4777b67ba28571d45868a1b15fdc7578\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:00.400930 kubelet[1605]: I0715 11:33:00.400835 1605 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4777b67ba28571d45868a1b15fdc7578-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"4777b67ba28571d45868a1b15fdc7578\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:00.400930 kubelet[1605]: I0715 11:33:00.400851 1605 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:00.400930 kubelet[1605]: I0715 11:33:00.400906 1605 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:00.609058 kubelet[1605]: E0715 11:33:00.608967 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:00.609812 env[1204]: time="2025-07-15T11:33:00.609771267Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:4777b67ba28571d45868a1b15fdc7578,Namespace:kube-system,Attempt:0,}" Jul 15 11:33:00.623238 kubelet[1605]: E0715 11:33:00.623172 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:00.623866 env[1204]: time="2025-07-15T11:33:00.623818871Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,}" Jul 15 11:33:00.628009 kubelet[1605]: E0715 11:33:00.627985 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:00.629193 env[1204]: time="2025-07-15T11:33:00.629125423Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,}" Jul 15 11:33:01.296777 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2513559319.mount: Deactivated successfully. Jul 15 11:33:01.378662 kubelet[1605]: W0715 11:33:01.378571 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.90:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:33:01.379023 kubelet[1605]: E0715 11:33:01.378673 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.90:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:33:01.427562 kubelet[1605]: W0715 11:33:01.427493 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.90:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:33:01.427704 kubelet[1605]: E0715 11:33:01.427570 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.90:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:33:01.441659 env[1204]: time="2025-07-15T11:33:01.441570311Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.473906 env[1204]: time="2025-07-15T11:33:01.473850382Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.476157 env[1204]: time="2025-07-15T11:33:01.476085438Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.478829 env[1204]: time="2025-07-15T11:33:01.478802394Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.481417 env[1204]: time="2025-07-15T11:33:01.481377490Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.482858 env[1204]: time="2025-07-15T11:33:01.482832903Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.484571 env[1204]: time="2025-07-15T11:33:01.484507877Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.485916 env[1204]: time="2025-07-15T11:33:01.485889510Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.487519 env[1204]: time="2025-07-15T11:33:01.487491845Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.488950 env[1204]: time="2025-07-15T11:33:01.488921288Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.491000 env[1204]: time="2025-07-15T11:33:01.490968604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.492197 env[1204]: time="2025-07-15T11:33:01.492160254Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:01.492783 kubelet[1605]: W0715 11:33:01.492704 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.90:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:33:01.492840 kubelet[1605]: E0715 11:33:01.492786 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.90:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:33:01.494014 kubelet[1605]: W0715 11:33:01.493973 1605 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.90:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.90:6443: connect: connection refused Jul 15 11:33:01.494072 kubelet[1605]: E0715 11:33:01.494027 1605 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.90:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.90:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:33:01.523878 env[1204]: time="2025-07-15T11:33:01.523781545Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:01.523878 env[1204]: time="2025-07-15T11:33:01.523847482Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:01.524242 env[1204]: time="2025-07-15T11:33:01.524070518Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:01.525057 env[1204]: time="2025-07-15T11:33:01.524992813Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4165c962053b3363d2e1dbab3a89819ba52cc3d5b7b091cee323ce83f12b6df4 pid=1647 runtime=io.containerd.runc.v2 Jul 15 11:33:01.531198 env[1204]: time="2025-07-15T11:33:01.531096827Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:01.531198 env[1204]: time="2025-07-15T11:33:01.531137365Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:01.531198 env[1204]: time="2025-07-15T11:33:01.531147184Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:01.531388 env[1204]: time="2025-07-15T11:33:01.531310546Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/18e575dd43b8b17225248e1835a1d206a4ceb6094085ca41801493bd935f16cc pid=1659 runtime=io.containerd.runc.v2 Jul 15 11:33:01.535660 env[1204]: time="2025-07-15T11:33:01.535571807Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:01.535660 env[1204]: time="2025-07-15T11:33:01.535618156Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:01.535660 env[1204]: time="2025-07-15T11:33:01.535627934Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:01.535857 env[1204]: time="2025-07-15T11:33:01.535785456Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/629a4d72232f189d123c7b5cd49ac11152367a61726a4815a3bc321e01a0b202 pid=1682 runtime=io.containerd.runc.v2 Jul 15 11:33:01.552132 systemd[1]: Started cri-containerd-4165c962053b3363d2e1dbab3a89819ba52cc3d5b7b091cee323ce83f12b6df4.scope. Jul 15 11:33:01.571161 systemd[1]: Started cri-containerd-18e575dd43b8b17225248e1835a1d206a4ceb6094085ca41801493bd935f16cc.scope. Jul 15 11:33:01.583327 systemd[1]: Started cri-containerd-629a4d72232f189d123c7b5cd49ac11152367a61726a4815a3bc321e01a0b202.scope. Jul 15 11:33:01.641233 kernel: kauditd_printk_skb: 215 callbacks suppressed Jul 15 11:33:01.641355 kernel: audit: type=1400 audit(1752579181.627:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.641385 kernel: audit: type=1400 audit(1752579181.627:429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.641407 kernel: audit: type=1400 audit(1752579181.627:430): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.641428 kernel: audit: type=1400 audit(1752579181.627:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.641448 kernel: audit: type=1400 audit(1752579181.627:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.641470 kernel: audit: audit_backlog=66 > audit_backlog_limit=64 Jul 15 11:33:01.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.643585 kernel: audit: type=1400 audit(1752579181.627:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.643620 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 15 11:33:01.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.647204 kernel: audit: type=1400 audit(1752579181.627:434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.647229 kernel: audit: backlog limit exceeded Jul 15 11:33:01.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit: BPF prog-id=58 op=LOAD Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit: BPF prog-id=59 op=LOAD Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138653537356464343362386231373232353234386531383335613164 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138653537356464343362386231373232353234386531383335613164 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1647 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363563393632303533623333363364326531646261623361383938 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1647 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363563393632303533623333363364326531646261623361383938 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit: BPF prog-id=60 op=LOAD Jul 15 11:33:01.633000 audit: BPF prog-id=62 op=LOAD Jul 15 11:33:01.639000 audit: BPF prog-id=61 op=LOAD Jul 15 11:33:01.646000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002870e0 items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138653537356464343362386231373232353234386531383335613164 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.633000 audit[1665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003f68a0 items=0 ppid=1647 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363563393632303533623333363364326531646261623361383938 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=63 op=LOAD Jul 15 11:33:01.649000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000287128 items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138653537356464343362386231373232353234386531383335613164 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=63 op=UNLOAD Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=64 op=LOAD Jul 15 11:33:01.649000 audit[1665]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003f68e8 items=0 ppid=1647 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363563393632303533623333363364326531646261623361383938 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=64 op=UNLOAD Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=62 op=UNLOAD Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { perfmon } for pid=1665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=65 op=LOAD Jul 15 11:33:01.649000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000287538 items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138653537356464343362386231373232353234386531383335613164 Jul 15 11:33:01.646000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1682 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632396134643732323332663138396431323363376235636434396163 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=66 op=LOAD Jul 15 11:33:01.649000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000284e50 items=0 ppid=1682 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632396134643732323332663138396431323363376235636434396163 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=67 op=LOAD Jul 15 11:33:01.649000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000284e98 items=0 ppid=1682 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632396134643732323332663138396431323363376235636434396163 Jul 15 11:33:01.649000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:33:01.650000 audit: BPF prog-id=66 op=UNLOAD Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.650000 audit: BPF prog-id=68 op=LOAD Jul 15 11:33:01.650000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002852a8 items=0 ppid=1682 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632396134643732323332663138396431323363376235636434396163 Jul 15 11:33:01.649000 audit[1665]: AVC avc: denied { bpf } for pid=1665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.649000 audit: BPF prog-id=69 op=LOAD Jul 15 11:33:01.649000 audit[1665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003f6cf8 items=0 ppid=1647 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363563393632303533623333363364326531646261623361383938 Jul 15 11:33:01.680389 env[1204]: time="2025-07-15T11:33:01.680331629Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"18e575dd43b8b17225248e1835a1d206a4ceb6094085ca41801493bd935f16cc\"" Jul 15 11:33:01.681362 kubelet[1605]: E0715 11:33:01.681333 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:01.681618 env[1204]: time="2025-07-15T11:33:01.681582541Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:4777b67ba28571d45868a1b15fdc7578,Namespace:kube-system,Attempt:0,} returns sandbox id \"4165c962053b3363d2e1dbab3a89819ba52cc3d5b7b091cee323ce83f12b6df4\"" Jul 15 11:33:01.682293 kubelet[1605]: E0715 11:33:01.682256 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:01.684148 env[1204]: time="2025-07-15T11:33:01.684100467Z" level=info msg="CreateContainer within sandbox \"18e575dd43b8b17225248e1835a1d206a4ceb6094085ca41801493bd935f16cc\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:33:01.687747 env[1204]: time="2025-07-15T11:33:01.687705362Z" level=info msg="CreateContainer within sandbox \"4165c962053b3363d2e1dbab3a89819ba52cc3d5b7b091cee323ce83f12b6df4\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:33:01.688595 env[1204]: time="2025-07-15T11:33:01.688549266Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"629a4d72232f189d123c7b5cd49ac11152367a61726a4815a3bc321e01a0b202\"" Jul 15 11:33:01.689344 kubelet[1605]: E0715 11:33:01.689323 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:01.691292 env[1204]: time="2025-07-15T11:33:01.691215586Z" level=info msg="CreateContainer within sandbox \"629a4d72232f189d123c7b5cd49ac11152367a61726a4815a3bc321e01a0b202\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:33:01.702729 env[1204]: time="2025-07-15T11:33:01.702696595Z" level=info msg="CreateContainer within sandbox \"18e575dd43b8b17225248e1835a1d206a4ceb6094085ca41801493bd935f16cc\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"accf6790d3bfa71a60b83fbd8c5781c5498dd92fee4c0ba875dca0d823154b17\"" Jul 15 11:33:01.703149 env[1204]: time="2025-07-15T11:33:01.703129995Z" level=info msg="StartContainer for \"accf6790d3bfa71a60b83fbd8c5781c5498dd92fee4c0ba875dca0d823154b17\"" Jul 15 11:33:01.712493 env[1204]: time="2025-07-15T11:33:01.712438700Z" level=info msg="CreateContainer within sandbox \"4165c962053b3363d2e1dbab3a89819ba52cc3d5b7b091cee323ce83f12b6df4\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"c62ca04984952e53f5267d4d9a625a60d124a9e224495f99b9d7779a583eb400\"" Jul 15 11:33:01.713081 env[1204]: time="2025-07-15T11:33:01.713057613Z" level=info msg="StartContainer for \"c62ca04984952e53f5267d4d9a625a60d124a9e224495f99b9d7779a583eb400\"" Jul 15 11:33:01.715024 env[1204]: time="2025-07-15T11:33:01.714995249Z" level=info msg="CreateContainer within sandbox \"629a4d72232f189d123c7b5cd49ac11152367a61726a4815a3bc321e01a0b202\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"b8949f8bfd9d8727c922954670fc8b1a8101add3d1e3b9b81abba4956fce2735\"" Jul 15 11:33:01.716052 systemd[1]: Started cri-containerd-accf6790d3bfa71a60b83fbd8c5781c5498dd92fee4c0ba875dca0d823154b17.scope. Jul 15 11:33:01.717993 env[1204]: time="2025-07-15T11:33:01.717949791Z" level=info msg="StartContainer for \"b8949f8bfd9d8727c922954670fc8b1a8101add3d1e3b9b81abba4956fce2735\"" Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit: BPF prog-id=70 op=LOAD Jul 15 11:33:01.729000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.729000 audit[1774]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00023dc48 a2=10 a3=1c items=0 ppid=1659 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163636636373930643362666137316136306238336662643863353738 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00023d6b0 a2=3c a3=8 items=0 ppid=1659 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163636636373930643362666137316136306238336662643863353738 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.730000 audit: BPF prog-id=71 op=LOAD Jul 15 11:33:01.730000 audit[1774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023d9d8 a2=78 a3=c0000249e0 items=0 ppid=1659 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163636636373930643362666137316136306238336662643863353738 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit: BPF prog-id=72 op=LOAD Jul 15 11:33:01.731000 audit[1774]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023d770 a2=78 a3=c000024a28 items=0 ppid=1659 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163636636373930643362666137316136306238336662643863353738 Jul 15 11:33:01.731000 audit: BPF prog-id=72 op=UNLOAD Jul 15 11:33:01.731000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { perfmon } for pid=1774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit[1774]: AVC avc: denied { bpf } for pid=1774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.731000 audit: BPF prog-id=73 op=LOAD Jul 15 11:33:01.731000 audit[1774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023dc30 a2=78 a3=c000024e38 items=0 ppid=1659 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163636636373930643362666137316136306238336662643863353738 Jul 15 11:33:01.736556 systemd[1]: Started cri-containerd-b8949f8bfd9d8727c922954670fc8b1a8101add3d1e3b9b81abba4956fce2735.scope. Jul 15 11:33:01.739790 systemd[1]: Started cri-containerd-c62ca04984952e53f5267d4d9a625a60d124a9e224495f99b9d7779a583eb400.scope. Jul 15 11:33:01.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.771000 audit: BPF prog-id=74 op=LOAD Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1647 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336326361303439383439353265353366353236376434643961363235 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1647 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336326361303439383439353265353366353236376434643961363235 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit: BPF prog-id=75 op=LOAD Jul 15 11:33:01.775000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00022ab00 items=0 ppid=1647 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336326361303439383439353265353366353236376434643961363235 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.775000 audit: BPF prog-id=76 op=LOAD Jul 15 11:33:01.775000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00022ab48 items=0 ppid=1647 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336326361303439383439353265353366353236376434643961363235 Jul 15 11:33:01.775000 audit: BPF prog-id=76 op=UNLOAD Jul 15 11:33:01.775000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.776000 audit: BPF prog-id=77 op=LOAD Jul 15 11:33:01.776000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00022af58 items=0 ppid=1647 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336326361303439383439353265353366353236376434643961363235 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.778000 audit: BPF prog-id=78 op=LOAD Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393439663862666439643837323763393232393534363730666338 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393439663862666439643837323763393232393534363730666338 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit: BPF prog-id=79 op=LOAD Jul 15 11:33:01.779000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000098660 items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393439663862666439643837323763393232393534363730666338 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit: BPF prog-id=80 op=LOAD Jul 15 11:33:01.779000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000986a8 items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393439663862666439643837323763393232393534363730666338 Jul 15 11:33:01.779000 audit: BPF prog-id=80 op=UNLOAD Jul 15 11:33:01.779000 audit: BPF prog-id=79 op=UNLOAD Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:01.779000 audit: BPF prog-id=81 op=LOAD Jul 15 11:33:01.779000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000098ab8 items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393439663862666439643837323763393232393534363730666338 Jul 15 11:33:01.789319 env[1204]: time="2025-07-15T11:33:01.785348914Z" level=info msg="StartContainer for \"accf6790d3bfa71a60b83fbd8c5781c5498dd92fee4c0ba875dca0d823154b17\" returns successfully" Jul 15 11:33:01.810366 env[1204]: time="2025-07-15T11:33:01.810265983Z" level=info msg="StartContainer for \"b8949f8bfd9d8727c922954670fc8b1a8101add3d1e3b9b81abba4956fce2735\" returns successfully" Jul 15 11:33:01.811347 env[1204]: time="2025-07-15T11:33:01.811315390Z" level=info msg="StartContainer for \"c62ca04984952e53f5267d4d9a625a60d124a9e224495f99b9d7779a583eb400\" returns successfully" Jul 15 11:33:01.924437 kubelet[1605]: I0715 11:33:01.924405 1605 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:33:02.204501 kubelet[1605]: E0715 11:33:02.204459 1605 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:33:02.204842 kubelet[1605]: E0715 11:33:02.204830 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:02.206396 kubelet[1605]: E0715 11:33:02.206384 1605 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:33:02.206572 kubelet[1605]: E0715 11:33:02.206560 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:02.208373 kubelet[1605]: E0715 11:33:02.208358 1605 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:33:02.208589 kubelet[1605]: E0715 11:33:02.208574 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:02.775000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:02.775000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003ca7e0 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:33:02.775000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:02.776000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:02.776000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003781c0 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:33:02.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:03.195000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:03.195000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c005958000 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:33:03.195000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:03.196000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:03.196000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c00469c510 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:33:03.196000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:03.201000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:03.201000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0069a3d20 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:33:03.201000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:03.202000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:03.202000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c005958060 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:33:03.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:03.207000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:03.207000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00361d740 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:33:03.207000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:03.207000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:03.207000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c0066ec450 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:33:03.207000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:33:03.211119 kubelet[1605]: E0715 11:33:03.211088 1605 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:33:03.211401 kubelet[1605]: E0715 11:33:03.211224 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:03.211401 kubelet[1605]: E0715 11:33:03.211390 1605 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:33:03.211504 kubelet[1605]: E0715 11:33:03.211480 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:03.333098 kubelet[1605]: I0715 11:33:03.333042 1605 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:33:03.333098 kubelet[1605]: E0715 11:33:03.333097 1605 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 15 11:33:03.343177 kubelet[1605]: E0715 11:33:03.343151 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:03.444086 kubelet[1605]: E0715 11:33:03.444030 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:03.544883 kubelet[1605]: E0715 11:33:03.544751 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:03.645609 kubelet[1605]: E0715 11:33:03.645555 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:03.746776 kubelet[1605]: E0715 11:33:03.746716 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:03.847326 kubelet[1605]: E0715 11:33:03.847227 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:03.948005 kubelet[1605]: E0715 11:33:03.947966 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.048120 kubelet[1605]: E0715 11:33:04.048079 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.149196 kubelet[1605]: E0715 11:33:04.149151 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.249775 kubelet[1605]: E0715 11:33:04.249736 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.350596 kubelet[1605]: E0715 11:33:04.350534 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.451531 kubelet[1605]: E0715 11:33:04.451429 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.552328 kubelet[1605]: E0715 11:33:04.552260 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.652891 kubelet[1605]: E0715 11:33:04.652848 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.753839 kubelet[1605]: E0715 11:33:04.753734 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.854650 kubelet[1605]: E0715 11:33:04.854579 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:04.955548 kubelet[1605]: E0715 11:33:04.955497 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.056432 kubelet[1605]: E0715 11:33:05.056292 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.156832 kubelet[1605]: E0715 11:33:05.156769 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.257205 kubelet[1605]: E0715 11:33:05.257137 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.357868 kubelet[1605]: E0715 11:33:05.357731 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.458359 kubelet[1605]: E0715 11:33:05.458307 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.558909 kubelet[1605]: E0715 11:33:05.558865 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.659915 kubelet[1605]: E0715 11:33:05.659868 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.760678 kubelet[1605]: E0715 11:33:05.760617 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.861372 kubelet[1605]: E0715 11:33:05.861334 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:05.962202 kubelet[1605]: E0715 11:33:05.962038 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:06.062902 kubelet[1605]: E0715 11:33:06.062847 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:06.163114 kubelet[1605]: E0715 11:33:06.163056 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:06.264142 kubelet[1605]: E0715 11:33:06.264057 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:06.364890 kubelet[1605]: E0715 11:33:06.364841 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:06.465641 kubelet[1605]: E0715 11:33:06.465581 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:06.566420 kubelet[1605]: E0715 11:33:06.566270 1605 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:06.676681 kubelet[1605]: I0715 11:33:06.676646 1605 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:06.683352 kubelet[1605]: I0715 11:33:06.683313 1605 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:33:06.688160 kubelet[1605]: I0715 11:33:06.688123 1605 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:07.155108 kubelet[1605]: I0715 11:33:07.155081 1605 apiserver.go:52] "Watching apiserver" Jul 15 11:33:07.157510 kubelet[1605]: E0715 11:33:07.157487 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:07.157649 kubelet[1605]: E0715 11:33:07.157631 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:07.157703 kubelet[1605]: E0715 11:33:07.157678 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:07.179880 kubelet[1605]: I0715 11:33:07.179849 1605 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:33:07.216548 kubelet[1605]: E0715 11:33:07.216515 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:07.216726 kubelet[1605]: E0715 11:33:07.216670 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:07.497440 kubelet[1605]: I0715 11:33:07.497302 1605 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.497248549 podStartE2EDuration="1.497248549s" podCreationTimestamp="2025-07-15 11:33:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:33:07.497134772 +0000 UTC m=+10.834013709" watchObservedRunningTime="2025-07-15 11:33:07.497248549 +0000 UTC m=+10.834127476" Jul 15 11:33:07.535477 kubelet[1605]: E0715 11:33:07.535443 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:07.775526 kubelet[1605]: I0715 11:33:07.775384 1605 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.7753617670000001 podStartE2EDuration="1.775361767s" podCreationTimestamp="2025-07-15 11:33:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:33:07.775072898 +0000 UTC m=+11.111951835" watchObservedRunningTime="2025-07-15 11:33:07.775361767 +0000 UTC m=+11.112240694" Jul 15 11:33:07.775526 kubelet[1605]: I0715 11:33:07.775517 1605 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.775511821 podStartE2EDuration="1.775511821s" podCreationTimestamp="2025-07-15 11:33:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:33:07.749253058 +0000 UTC m=+11.086132005" watchObservedRunningTime="2025-07-15 11:33:07.775511821 +0000 UTC m=+11.112390758" Jul 15 11:33:07.846954 systemd[1]: Reloading. Jul 15 11:33:07.914246 /usr/lib/systemd/system-generators/torcx-generator[1899]: time="2025-07-15T11:33:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:33:07.914278 /usr/lib/systemd/system-generators/torcx-generator[1899]: time="2025-07-15T11:33:07Z" level=info msg="torcx already run" Jul 15 11:33:07.984097 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:33:07.984115 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:33:08.001579 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:33:08.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.075940 kernel: kauditd_printk_skb: 356 callbacks suppressed Jul 15 11:33:08.076015 kernel: audit: type=1400 audit(1752579188.074:543): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.082118 kernel: audit: type=1400 audit(1752579188.074:544): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.088820 kernel: audit: type=1400 audit(1752579188.074:545): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.088912 kernel: audit: type=1400 audit(1752579188.074:546): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.088954 kernel: audit: type=1400 audit(1752579188.074:547): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.091862 kernel: audit: type=1400 audit(1752579188.074:548): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.098780 kernel: audit: type=1400 audit(1752579188.074:549): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.102197 kernel: audit: type=1400 audit(1752579188.074:550): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.102245 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 15 11:33:08.102262 kernel: audit: type=1400 audit(1752579188.074:551): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.078000 audit: BPF prog-id=82 op=LOAD Jul 15 11:33:08.078000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:33:08.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.081000 audit: BPF prog-id=83 op=LOAD Jul 15 11:33:08.081000 audit: BPF prog-id=61 op=UNLOAD Jul 15 11:33:08.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.085000 audit: BPF prog-id=84 op=LOAD Jul 15 11:33:08.085000 audit: BPF prog-id=70 op=UNLOAD Jul 15 11:33:08.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.091000 audit: BPF prog-id=85 op=LOAD Jul 15 11:33:08.091000 audit: BPF prog-id=78 op=UNLOAD Jul 15 11:33:08.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.095000 audit: BPF prog-id=86 op=LOAD Jul 15 11:33:08.095000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:33:08.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.098000 audit: BPF prog-id=87 op=LOAD Jul 15 11:33:08.098000 audit: BPF prog-id=45 op=UNLOAD Jul 15 11:33:08.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit: BPF prog-id=88 op=LOAD Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit: BPF prog-id=89 op=LOAD Jul 15 11:33:08.106000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:33:08.106000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.107000 audit: BPF prog-id=90 op=LOAD Jul 15 11:33:08.107000 audit: BPF prog-id=74 op=UNLOAD Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit: BPF prog-id=91 op=LOAD Jul 15 11:33:08.108000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit: BPF prog-id=92 op=LOAD Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.108000 audit: BPF prog-id=93 op=LOAD Jul 15 11:33:08.108000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:33:08.108000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit: BPF prog-id=94 op=LOAD Jul 15 11:33:08.109000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.109000 audit: BPF prog-id=95 op=LOAD Jul 15 11:33:08.109000 audit: BPF prog-id=59 op=UNLOAD Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit: BPF prog-id=96 op=LOAD Jul 15 11:33:08.110000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit: BPF prog-id=97 op=LOAD Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.110000 audit: BPF prog-id=98 op=LOAD Jul 15 11:33:08.111000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:33:08.111000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:33:08.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit: BPF prog-id=99 op=LOAD Jul 15 11:33:08.113000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit: BPF prog-id=100 op=LOAD Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit: BPF prog-id=101 op=LOAD Jul 15 11:33:08.113000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:33:08.113000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.114000 audit: BPF prog-id=102 op=LOAD Jul 15 11:33:08.114000 audit: BPF prog-id=58 op=UNLOAD Jul 15 11:33:08.126375 systemd[1]: Stopping kubelet.service... Jul 15 11:33:08.152544 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:33:08.152729 systemd[1]: Stopped kubelet.service. Jul 15 11:33:08.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:08.154647 systemd[1]: Starting kubelet.service... Jul 15 11:33:08.276638 systemd[1]: Started kubelet.service. Jul 15 11:33:08.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:08.322137 kubelet[1945]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:33:08.322137 kubelet[1945]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:33:08.322137 kubelet[1945]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:33:08.322674 kubelet[1945]: I0715 11:33:08.322205 1945 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:33:08.330265 kubelet[1945]: I0715 11:33:08.330143 1945 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 15 11:33:08.330265 kubelet[1945]: I0715 11:33:08.330169 1945 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:33:08.330464 kubelet[1945]: I0715 11:33:08.330435 1945 server.go:954] "Client rotation is on, will bootstrap in background" Jul 15 11:33:08.331863 kubelet[1945]: I0715 11:33:08.331828 1945 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 15 11:33:08.334046 kubelet[1945]: I0715 11:33:08.334011 1945 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:33:08.337709 kubelet[1945]: E0715 11:33:08.337671 1945 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:33:08.337709 kubelet[1945]: I0715 11:33:08.337704 1945 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:33:08.341876 kubelet[1945]: I0715 11:33:08.341843 1945 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:33:08.342059 kubelet[1945]: I0715 11:33:08.342023 1945 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:33:08.342343 kubelet[1945]: I0715 11:33:08.342052 1945 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:33:08.342343 kubelet[1945]: I0715 11:33:08.342344 1945 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:33:08.342508 kubelet[1945]: I0715 11:33:08.342354 1945 container_manager_linux.go:304] "Creating device plugin manager" Jul 15 11:33:08.342508 kubelet[1945]: I0715 11:33:08.342412 1945 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:33:08.342567 kubelet[1945]: I0715 11:33:08.342533 1945 kubelet.go:446] "Attempting to sync node with API server" Jul 15 11:33:08.342567 kubelet[1945]: I0715 11:33:08.342551 1945 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:33:08.342567 kubelet[1945]: I0715 11:33:08.342567 1945 kubelet.go:352] "Adding apiserver pod source" Jul 15 11:33:08.342663 kubelet[1945]: I0715 11:33:08.342578 1945 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:33:08.343379 kubelet[1945]: I0715 11:33:08.343355 1945 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:33:08.343918 kubelet[1945]: I0715 11:33:08.343896 1945 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:33:08.344900 kubelet[1945]: I0715 11:33:08.344884 1945 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:33:08.345110 kubelet[1945]: I0715 11:33:08.345067 1945 server.go:1287] "Started kubelet" Jul 15 11:33:08.348699 kubelet[1945]: I0715 11:33:08.348647 1945 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:33:08.348895 kubelet[1945]: I0715 11:33:08.348877 1945 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:33:08.348955 kubelet[1945]: I0715 11:33:08.348916 1945 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:33:08.349898 kubelet[1945]: I0715 11:33:08.349872 1945 server.go:479] "Adding debug handlers to kubelet server" Jul 15 11:33:08.350000 audit[1945]: AVC avc: denied { mac_admin } for pid=1945 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.350000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:33:08.350000 audit[1945]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0003a8960 a1=c00091f8a8 a2=c0003a8930 a3=25 items=0 ppid=1 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:08.350000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:33:08.350000 audit[1945]: AVC avc: denied { mac_admin } for pid=1945 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.350000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:33:08.350000 audit[1945]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0005ba180 a1=c00091f8c0 a2=c0003a89f0 a3=25 items=0 ppid=1 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:08.350000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:33:08.350791 kubelet[1945]: I0715 11:33:08.350433 1945 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:33:08.350791 kubelet[1945]: I0715 11:33:08.350499 1945 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:33:08.350791 kubelet[1945]: I0715 11:33:08.350542 1945 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:33:08.350993 kubelet[1945]: I0715 11:33:08.350976 1945 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:33:08.352920 kubelet[1945]: E0715 11:33:08.352881 1945 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:33:08.352920 kubelet[1945]: I0715 11:33:08.352914 1945 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:33:08.353078 kubelet[1945]: I0715 11:33:08.353055 1945 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:33:08.353150 kubelet[1945]: I0715 11:33:08.353142 1945 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:33:08.358062 kubelet[1945]: I0715 11:33:08.358026 1945 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:33:08.358210 kubelet[1945]: I0715 11:33:08.358165 1945 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:33:08.361646 kubelet[1945]: I0715 11:33:08.361164 1945 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:33:08.364000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:08.364000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000bc4d20 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:33:08.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:08.364000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:08.364000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000bc4ee0 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:33:08.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:08.364000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:08.364000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000bc50a0 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:33:08.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:08.364000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:08.364000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000cf4000 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:33:08.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:08.367828 kubelet[1945]: I0715 11:33:08.367781 1945 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:33:08.370527 kubelet[1945]: I0715 11:33:08.370494 1945 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:33:08.370586 kubelet[1945]: I0715 11:33:08.370543 1945 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 15 11:33:08.370586 kubelet[1945]: I0715 11:33:08.370564 1945 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:33:08.370586 kubelet[1945]: I0715 11:33:08.370572 1945 kubelet.go:2382] "Starting kubelet main sync loop" Jul 15 11:33:08.370683 kubelet[1945]: E0715 11:33:08.370613 1945 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:33:08.404698 kubelet[1945]: I0715 11:33:08.404672 1945 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:33:08.404698 kubelet[1945]: I0715 11:33:08.404686 1945 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:33:08.404698 kubelet[1945]: I0715 11:33:08.404704 1945 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:33:08.405003 kubelet[1945]: I0715 11:33:08.404842 1945 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:33:08.405003 kubelet[1945]: I0715 11:33:08.404852 1945 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:33:08.405003 kubelet[1945]: I0715 11:33:08.404870 1945 policy_none.go:49] "None policy: Start" Jul 15 11:33:08.405003 kubelet[1945]: I0715 11:33:08.404878 1945 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:33:08.405003 kubelet[1945]: I0715 11:33:08.404888 1945 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:33:08.405003 kubelet[1945]: I0715 11:33:08.404986 1945 state_mem.go:75] "Updated machine memory state" Jul 15 11:33:08.408333 kubelet[1945]: I0715 11:33:08.408298 1945 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:33:08.408000 audit[1945]: AVC avc: denied { mac_admin } for pid=1945 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:08.408000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:33:08.408000 audit[1945]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007b63c0 a1=c000eb61c8 a2=c0007b6390 a3=25 items=0 ppid=1 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:08.408000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:33:08.408680 kubelet[1945]: I0715 11:33:08.408353 1945 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:33:08.408680 kubelet[1945]: I0715 11:33:08.408476 1945 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:33:08.408680 kubelet[1945]: I0715 11:33:08.408487 1945 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:33:08.408751 kubelet[1945]: I0715 11:33:08.408690 1945 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:33:08.410468 kubelet[1945]: E0715 11:33:08.410450 1945 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:33:08.472139 kubelet[1945]: I0715 11:33:08.472082 1945 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:08.472139 kubelet[1945]: I0715 11:33:08.472111 1945 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:33:08.472321 kubelet[1945]: I0715 11:33:08.472156 1945 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:08.477874 kubelet[1945]: E0715 11:33:08.477847 1945 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 15 11:33:08.478015 kubelet[1945]: E0715 11:33:08.477998 1945 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:08.478133 kubelet[1945]: E0715 11:33:08.478099 1945 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:08.512502 kubelet[1945]: I0715 11:33:08.512469 1945 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:33:08.520652 kubelet[1945]: I0715 11:33:08.520602 1945 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 15 11:33:08.520779 kubelet[1945]: I0715 11:33:08.520695 1945 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:33:08.653677 kubelet[1945]: I0715 11:33:08.653614 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:08.653677 kubelet[1945]: I0715 11:33:08.653660 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:33:08.653677 kubelet[1945]: I0715 11:33:08.653682 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4777b67ba28571d45868a1b15fdc7578-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"4777b67ba28571d45868a1b15fdc7578\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:08.653900 kubelet[1945]: I0715 11:33:08.653697 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4777b67ba28571d45868a1b15fdc7578-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"4777b67ba28571d45868a1b15fdc7578\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:08.653900 kubelet[1945]: I0715 11:33:08.653712 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4777b67ba28571d45868a1b15fdc7578-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"4777b67ba28571d45868a1b15fdc7578\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:08.653900 kubelet[1945]: I0715 11:33:08.653727 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:08.653900 kubelet[1945]: I0715 11:33:08.653742 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:08.653900 kubelet[1945]: I0715 11:33:08.653754 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:08.654010 kubelet[1945]: I0715 11:33:08.653767 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:33:08.779012 kubelet[1945]: E0715 11:33:08.778873 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:08.779012 kubelet[1945]: E0715 11:33:08.778911 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:08.779012 kubelet[1945]: E0715 11:33:08.778911 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:09.343787 kubelet[1945]: I0715 11:33:09.343742 1945 apiserver.go:52] "Watching apiserver" Jul 15 11:33:09.353481 kubelet[1945]: I0715 11:33:09.353460 1945 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:33:09.388158 kubelet[1945]: E0715 11:33:09.388112 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:09.388874 kubelet[1945]: I0715 11:33:09.388844 1945 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:09.389287 kubelet[1945]: E0715 11:33:09.389261 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:09.397134 kubelet[1945]: E0715 11:33:09.397087 1945 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:33:09.397344 kubelet[1945]: E0715 11:33:09.397320 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:09.507000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:33:09.507000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0006b3d40 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:33:09.507000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:09.593959 update_engine[1198]: I0715 11:33:09.593816 1198 update_attempter.cc:509] Updating boot flags... Jul 15 11:33:10.388892 kubelet[1945]: E0715 11:33:10.388860 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:10.389214 kubelet[1945]: E0715 11:33:10.388962 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:11.389487 kubelet[1945]: E0715 11:33:11.389455 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:12.693762 kubelet[1945]: E0715 11:33:12.693730 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:12.820801 kubelet[1945]: I0715 11:33:12.820759 1945 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:33:12.821219 env[1204]: time="2025-07-15T11:33:12.821168967Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:33:12.821558 kubelet[1945]: I0715 11:33:12.821371 1945 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:33:12.930394 systemd[1]: Created slice kubepods-besteffort-pod65001f22_4667_4948_9f90_e32545337f5a.slice. Jul 15 11:33:12.988327 kubelet[1945]: I0715 11:33:12.988169 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/65001f22-4667-4948-9f90-e32545337f5a-kube-proxy\") pod \"kube-proxy-wbjlt\" (UID: \"65001f22-4667-4948-9f90-e32545337f5a\") " pod="kube-system/kube-proxy-wbjlt" Jul 15 11:33:12.988327 kubelet[1945]: I0715 11:33:12.988247 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/65001f22-4667-4948-9f90-e32545337f5a-xtables-lock\") pod \"kube-proxy-wbjlt\" (UID: \"65001f22-4667-4948-9f90-e32545337f5a\") " pod="kube-system/kube-proxy-wbjlt" Jul 15 11:33:12.988327 kubelet[1945]: I0715 11:33:12.988266 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/65001f22-4667-4948-9f90-e32545337f5a-lib-modules\") pod \"kube-proxy-wbjlt\" (UID: \"65001f22-4667-4948-9f90-e32545337f5a\") " pod="kube-system/kube-proxy-wbjlt" Jul 15 11:33:12.988327 kubelet[1945]: I0715 11:33:12.988301 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dxwx7\" (UniqueName: \"kubernetes.io/projected/65001f22-4667-4948-9f90-e32545337f5a-kube-api-access-dxwx7\") pod \"kube-proxy-wbjlt\" (UID: \"65001f22-4667-4948-9f90-e32545337f5a\") " pod="kube-system/kube-proxy-wbjlt" Jul 15 11:33:13.095411 kubelet[1945]: E0715 11:33:13.095354 1945 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Jul 15 11:33:13.095411 kubelet[1945]: E0715 11:33:13.095395 1945 projected.go:194] Error preparing data for projected volume kube-api-access-dxwx7 for pod kube-system/kube-proxy-wbjlt: configmap "kube-root-ca.crt" not found Jul 15 11:33:13.095670 kubelet[1945]: E0715 11:33:13.095467 1945 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/65001f22-4667-4948-9f90-e32545337f5a-kube-api-access-dxwx7 podName:65001f22-4667-4948-9f90-e32545337f5a nodeName:}" failed. No retries permitted until 2025-07-15 11:33:13.595444385 +0000 UTC m=+5.315421284 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-dxwx7" (UniqueName: "kubernetes.io/projected/65001f22-4667-4948-9f90-e32545337f5a-kube-api-access-dxwx7") pod "kube-proxy-wbjlt" (UID: "65001f22-4667-4948-9f90-e32545337f5a") : configmap "kube-root-ca.crt" not found Jul 15 11:33:13.393378 kubelet[1945]: E0715 11:33:13.393258 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:13.693664 kubelet[1945]: I0715 11:33:13.693622 1945 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:33:13.839766 kubelet[1945]: E0715 11:33:13.839726 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:13.840537 env[1204]: time="2025-07-15T11:33:13.840478938Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-wbjlt,Uid:65001f22-4667-4948-9f90-e32545337f5a,Namespace:kube-system,Attempt:0,}" Jul 15 11:33:14.174335 env[1204]: time="2025-07-15T11:33:14.174248490Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:14.174335 env[1204]: time="2025-07-15T11:33:14.174317461Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:14.174335 env[1204]: time="2025-07-15T11:33:14.174338200Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:14.174606 env[1204]: time="2025-07-15T11:33:14.174491460Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a614e6ec10e164cefec5cfc114cf4046961b546bb99664993c190071acf8724e pid=2014 runtime=io.containerd.runc.v2 Jul 15 11:33:14.189612 systemd[1]: Started cri-containerd-a614e6ec10e164cefec5cfc114cf4046961b546bb99664993c190071acf8724e.scope. Jul 15 11:33:14.192434 systemd[1]: Created slice kubepods-besteffort-pod14adf58c_5a07_4cbe_b119_609c01404956.slice. Jul 15 11:33:14.197958 kubelet[1945]: I0715 11:33:14.197880 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/14adf58c-5a07-4cbe-b119-609c01404956-var-lib-calico\") pod \"tigera-operator-747864d56d-6l4fm\" (UID: \"14adf58c-5a07-4cbe-b119-609c01404956\") " pod="tigera-operator/tigera-operator-747864d56d-6l4fm" Jul 15 11:33:14.197958 kubelet[1945]: I0715 11:33:14.197911 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ckfcp\" (UniqueName: \"kubernetes.io/projected/14adf58c-5a07-4cbe-b119-609c01404956-kube-api-access-ckfcp\") pod \"tigera-operator-747864d56d-6l4fm\" (UID: \"14adf58c-5a07-4cbe-b119-609c01404956\") " pod="tigera-operator/tigera-operator-747864d56d-6l4fm" Jul 15 11:33:14.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.199950 kernel: kauditd_printk_skb: 275 callbacks suppressed Jul 15 11:33:14.200000 kernel: audit: type=1400 audit(1752579194.198:791): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210889 kernel: audit: type=1400 audit(1752579194.198:792): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210946 kernel: audit: type=1400 audit(1752579194.198:793): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210965 kernel: audit: type=1400 audit(1752579194.198:794): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.215155 kernel: audit: type=1400 audit(1752579194.198:795): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.215224 kernel: audit: type=1400 audit(1752579194.198:796): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.216632 kernel: audit: type=1400 audit(1752579194.198:797): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.222232 kernel: audit: type=1400 audit(1752579194.198:798): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.222272 kernel: audit: type=1400 audit(1752579194.198:799): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.227725 kernel: audit: type=1400 audit(1752579194.202:800): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.202000 audit: BPF prog-id=103 op=LOAD Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2014 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313465366563313065313634636566656335636663313134636634 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2014 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313465366563313065313634636566656335636663313134636634 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.203000 audit: BPF prog-id=104 op=LOAD Jul 15 11:33:14.203000 audit[2022]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000096d60 items=0 ppid=2014 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313465366563313065313634636566656335636663313134636634 Jul 15 11:33:14.207000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.207000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.207000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.207000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.207000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.207000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.207000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.207000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.207000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.207000 audit: BPF prog-id=105 op=LOAD Jul 15 11:33:14.207000 audit[2022]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000096da8 items=0 ppid=2014 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313465366563313065313634636566656335636663313134636634 Jul 15 11:33:14.210000 audit: BPF prog-id=105 op=UNLOAD Jul 15 11:33:14.210000 audit: BPF prog-id=104 op=UNLOAD Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { perfmon } for pid=2022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit[2022]: AVC avc: denied { bpf } for pid=2022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.210000 audit: BPF prog-id=106 op=LOAD Jul 15 11:33:14.210000 audit[2022]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000971b8 items=0 ppid=2014 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313465366563313065313634636566656335636663313134636634 Jul 15 11:33:14.235240 env[1204]: time="2025-07-15T11:33:14.235172533Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-wbjlt,Uid:65001f22-4667-4948-9f90-e32545337f5a,Namespace:kube-system,Attempt:0,} returns sandbox id \"a614e6ec10e164cefec5cfc114cf4046961b546bb99664993c190071acf8724e\"" Jul 15 11:33:14.235834 kubelet[1945]: E0715 11:33:14.235813 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:14.237320 env[1204]: time="2025-07-15T11:33:14.237296079Z" level=info msg="CreateContainer within sandbox \"a614e6ec10e164cefec5cfc114cf4046961b546bb99664993c190071acf8724e\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:33:14.444705 env[1204]: time="2025-07-15T11:33:14.444613505Z" level=info msg="CreateContainer within sandbox \"a614e6ec10e164cefec5cfc114cf4046961b546bb99664993c190071acf8724e\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"e562d5fecf0abec16af8251554537ddccef3f2df404d515e9114a61d5b3d39be\"" Jul 15 11:33:14.445802 env[1204]: time="2025-07-15T11:33:14.445197238Z" level=info msg="StartContainer for \"e562d5fecf0abec16af8251554537ddccef3f2df404d515e9114a61d5b3d39be\"" Jul 15 11:33:14.458892 systemd[1]: Started cri-containerd-e562d5fecf0abec16af8251554537ddccef3f2df404d515e9114a61d5b3d39be.scope. Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f7fcd0049a8 items=0 ppid=2014 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535363264356665636630616265633136616638323531353534353337 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit: BPF prog-id=107 op=LOAD Jul 15 11:33:14.472000 audit[2055]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000351d68 items=0 ppid=2014 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535363264356665636630616265633136616638323531353534353337 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit: BPF prog-id=108 op=LOAD Jul 15 11:33:14.472000 audit[2055]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000351db8 items=0 ppid=2014 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535363264356665636630616265633136616638323531353534353337 Jul 15 11:33:14.472000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:33:14.472000 audit: BPF prog-id=107 op=UNLOAD Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { perfmon } for pid=2055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit[2055]: AVC avc: denied { bpf } for pid=2055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.472000 audit: BPF prog-id=109 op=LOAD Jul 15 11:33:14.472000 audit[2055]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000351e48 items=0 ppid=2014 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535363264356665636630616265633136616638323531353534353337 Jul 15 11:33:14.486655 env[1204]: time="2025-07-15T11:33:14.486592360Z" level=info msg="StartContainer for \"e562d5fecf0abec16af8251554537ddccef3f2df404d515e9114a61d5b3d39be\" returns successfully" Jul 15 11:33:14.495812 env[1204]: time="2025-07-15T11:33:14.495769075Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-6l4fm,Uid:14adf58c-5a07-4cbe-b119-609c01404956,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:33:14.511683 env[1204]: time="2025-07-15T11:33:14.511597296Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:14.511683 env[1204]: time="2025-07-15T11:33:14.511648964Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:14.511861 env[1204]: time="2025-07-15T11:33:14.511666478Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:14.511897 env[1204]: time="2025-07-15T11:33:14.511839545Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/62d5993fe2602493c5fcd87703e0a60cf2b87994a6187c2144f2c298019efebf pid=2093 runtime=io.containerd.runc.v2 Jul 15 11:33:14.522528 systemd[1]: Started cri-containerd-62d5993fe2602493c5fcd87703e0a60cf2b87994a6187c2144f2c298019efebf.scope. Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit: BPF prog-id=110 op=LOAD Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2093 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539393366653236303234393363356663643837373033653061 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2093 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539393366653236303234393363356663643837373033653061 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit: BPF prog-id=111 op=LOAD Jul 15 11:33:14.532000 audit[2101]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000285470 items=0 ppid=2093 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539393366653236303234393363356663643837373033653061 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit: BPF prog-id=112 op=LOAD Jul 15 11:33:14.532000 audit[2101]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002854b8 items=0 ppid=2093 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539393366653236303234393363356663643837373033653061 Jul 15 11:33:14.532000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:33:14.532000 audit: BPF prog-id=111 op=UNLOAD Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:14.532000 audit: BPF prog-id=113 op=LOAD Jul 15 11:33:14.532000 audit[2101]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002858c8 items=0 ppid=2093 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539393366653236303234393363356663643837373033653061 Jul 15 11:33:14.556403 env[1204]: time="2025-07-15T11:33:14.556307307Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-6l4fm,Uid:14adf58c-5a07-4cbe-b119-609c01404956,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"62d5993fe2602493c5fcd87703e0a60cf2b87994a6187c2144f2c298019efebf\"" Jul 15 11:33:14.558831 env[1204]: time="2025-07-15T11:33:14.558796014Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:33:14.579000 audit[2160]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.579000 audit[2160]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdf24a26e0 a2=0 a3=7ffdf24a26cc items=0 ppid=2067 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.579000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:33:14.584000 audit[2161]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.584000 audit[2163]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.584000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdc812a570 a2=0 a3=7ffdc812a55c items=0 ppid=2067 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.584000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2939f540 a2=0 a3=7fff2939f52c items=0 ppid=2067 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.584000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:33:14.584000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:33:14.585000 audit[2164]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.585000 audit[2164]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff3990a7b0 a2=0 a3=7fff3990a79c items=0 ppid=2067 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.585000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:33:14.585000 audit[2165]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.585000 audit[2165]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffedc3f6900 a2=0 a3=7ffedc3f68ec items=0 ppid=2067 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.585000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:33:14.586000 audit[2166]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.586000 audit[2166]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcf55e50a0 a2=0 a3=7ffcf55e508c items=0 ppid=2067 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.586000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:33:14.681000 audit[2167]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.681000 audit[2167]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd3efe3000 a2=0 a3=7ffd3efe2fec items=0 ppid=2067 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.681000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:33:14.683000 audit[2169]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.683000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcbfaf7610 a2=0 a3=7ffcbfaf75fc items=0 ppid=2067 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.683000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:33:14.686000 audit[2172]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.686000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcfcd2acb0 a2=0 a3=7ffcfcd2ac9c items=0 ppid=2067 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.686000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:33:14.687000 audit[2173]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.687000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff45995b10 a2=0 a3=7fff45995afc items=0 ppid=2067 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.687000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:33:14.689000 audit[2175]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.689000 audit[2175]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc9ee339c0 a2=0 a3=7ffc9ee339ac items=0 ppid=2067 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.689000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:33:14.690000 audit[2176]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.690000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc4f99b480 a2=0 a3=7ffc4f99b46c items=0 ppid=2067 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.690000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:33:14.692000 audit[2178]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.692000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc25611210 a2=0 a3=7ffc256111fc items=0 ppid=2067 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.692000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:33:14.695000 audit[2181]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.695000 audit[2181]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe041d58e0 a2=0 a3=7ffe041d58cc items=0 ppid=2067 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.695000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:33:14.696000 audit[2182]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.696000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2f7e6420 a2=0 a3=7ffe2f7e640c items=0 ppid=2067 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.696000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:33:14.698000 audit[2184]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.698000 audit[2184]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffb24e5a60 a2=0 a3=7fffb24e5a4c items=0 ppid=2067 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.698000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:33:14.701000 audit[2185]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.701000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd6f420b0 a2=0 a3=7fffd6f4209c items=0 ppid=2067 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.701000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:33:14.704000 audit[2187]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.704000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffee1752e30 a2=0 a3=7ffee1752e1c items=0 ppid=2067 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.704000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:33:14.707000 audit[2190]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.707000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff581db1a0 a2=0 a3=7fff581db18c items=0 ppid=2067 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.707000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:33:14.710000 audit[2193]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.710000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffb106e6d0 a2=0 a3=7fffb106e6bc items=0 ppid=2067 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.710000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:33:14.711000 audit[2194]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.711000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffd1bdf620 a2=0 a3=7fffd1bdf60c items=0 ppid=2067 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.711000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:33:14.713000 audit[2196]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.713000 audit[2196]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe6bf9d810 a2=0 a3=7ffe6bf9d7fc items=0 ppid=2067 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.713000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:33:14.716000 audit[2199]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.716000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd007da000 a2=0 a3=7ffd007d9fec items=0 ppid=2067 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.716000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:33:14.717000 audit[2200]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.717000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6e629f00 a2=0 a3=7fff6e629eec items=0 ppid=2067 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.717000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:33:14.719000 audit[2202]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:33:14.719000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe52cfc7d0 a2=0 a3=7ffe52cfc7bc items=0 ppid=2067 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.719000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:33:14.738000 audit[2208]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:14.738000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffeba0074c0 a2=0 a3=7ffeba0074ac items=0 ppid=2067 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.738000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:14.748000 audit[2208]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:14.748000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffeba0074c0 a2=0 a3=7ffeba0074ac items=0 ppid=2067 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.748000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:14.749000 audit[2213]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.749000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcd9c1c470 a2=0 a3=7ffcd9c1c45c items=0 ppid=2067 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.749000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:33:14.752000 audit[2215]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.752000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc2c526960 a2=0 a3=7ffc2c52694c items=0 ppid=2067 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.752000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:33:14.755000 audit[2218]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.755000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff3e7faf20 a2=0 a3=7fff3e7faf0c items=0 ppid=2067 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.755000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:33:14.756000 audit[2219]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.756000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4d5ac760 a2=0 a3=7fff4d5ac74c items=0 ppid=2067 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.756000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:33:14.758000 audit[2221]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.758000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff3894ef70 a2=0 a3=7fff3894ef5c items=0 ppid=2067 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.758000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:33:14.759000 audit[2222]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.759000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc77c37d70 a2=0 a3=7ffc77c37d5c items=0 ppid=2067 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.759000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:33:14.762000 audit[2224]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.762000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdf58ed250 a2=0 a3=7ffdf58ed23c items=0 ppid=2067 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.762000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:33:14.765000 audit[2227]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.765000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe72ab6be0 a2=0 a3=7ffe72ab6bcc items=0 ppid=2067 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.765000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:33:14.765000 audit[2228]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.765000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe401c7b70 a2=0 a3=7ffe401c7b5c items=0 ppid=2067 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.765000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:33:14.767000 audit[2230]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.767000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe7c1f1680 a2=0 a3=7ffe7c1f166c items=0 ppid=2067 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.767000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:33:14.768000 audit[2231]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.768000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd120dcc30 a2=0 a3=7ffd120dcc1c items=0 ppid=2067 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.768000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:33:14.770000 audit[2233]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.770000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe2f4fc500 a2=0 a3=7ffe2f4fc4ec items=0 ppid=2067 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.770000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:33:14.773000 audit[2236]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.773000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd497207c0 a2=0 a3=7ffd497207ac items=0 ppid=2067 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.773000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:33:14.776000 audit[2239]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.776000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffc947ef60 a2=0 a3=7fffc947ef4c items=0 ppid=2067 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.776000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:33:14.777000 audit[2240]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.777000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc2672e1d0 a2=0 a3=7ffc2672e1bc items=0 ppid=2067 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.777000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:33:14.778000 audit[2242]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.778000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffed447b400 a2=0 a3=7ffed447b3ec items=0 ppid=2067 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.778000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:33:14.781000 audit[2245]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.781000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffdf25ae230 a2=0 a3=7ffdf25ae21c items=0 ppid=2067 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.781000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:33:14.782000 audit[2246]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.782000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef8da13b0 a2=0 a3=7ffef8da139c items=0 ppid=2067 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.782000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:33:14.784000 audit[2248]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.784000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd2fc52060 a2=0 a3=7ffd2fc5204c items=0 ppid=2067 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.784000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:33:14.785000 audit[2249]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.785000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffefb2211f0 a2=0 a3=7ffefb2211dc items=0 ppid=2067 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.785000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:33:14.787000 audit[2251]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.787000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffef17531b0 a2=0 a3=7ffef175319c items=0 ppid=2067 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.787000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:33:14.790000 audit[2254]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:33:14.790000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd754eada0 a2=0 a3=7ffd754ead8c items=0 ppid=2067 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.790000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:33:14.792000 audit[2256]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:33:14.792000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffeb5e83900 a2=0 a3=7ffeb5e838ec items=0 ppid=2067 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.792000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:14.792000 audit[2256]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:33:14.792000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffeb5e83900 a2=0 a3=7ffeb5e838ec items=0 ppid=2067 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:14.792000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:15.398624 kubelet[1945]: E0715 11:33:15.398581 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:15.408642 kubelet[1945]: I0715 11:33:15.408575 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-wbjlt" podStartSLOduration=3.408541396 podStartE2EDuration="3.408541396s" podCreationTimestamp="2025-07-15 11:33:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:33:15.408413505 +0000 UTC m=+7.128390414" watchObservedRunningTime="2025-07-15 11:33:15.408541396 +0000 UTC m=+7.128518305" Jul 15 11:33:16.013672 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount279730196.mount: Deactivated successfully. Jul 15 11:33:16.211155 kubelet[1945]: E0715 11:33:16.211122 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:16.401034 kubelet[1945]: E0715 11:33:16.401012 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:16.401492 kubelet[1945]: E0715 11:33:16.401458 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:17.259205 env[1204]: time="2025-07-15T11:33:17.259140864Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.261479 env[1204]: time="2025-07-15T11:33:17.261443552Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.263037 env[1204]: time="2025-07-15T11:33:17.263001744Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.264833 env[1204]: time="2025-07-15T11:33:17.264767478Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:17.265322 env[1204]: time="2025-07-15T11:33:17.265281459Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 15 11:33:17.267392 env[1204]: time="2025-07-15T11:33:17.267351026Z" level=info msg="CreateContainer within sandbox \"62d5993fe2602493c5fcd87703e0a60cf2b87994a6187c2144f2c298019efebf\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:33:17.277658 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2892505293.mount: Deactivated successfully. Jul 15 11:33:17.278885 env[1204]: time="2025-07-15T11:33:17.278836744Z" level=info msg="CreateContainer within sandbox \"62d5993fe2602493c5fcd87703e0a60cf2b87994a6187c2144f2c298019efebf\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"32958ce776dd888bc6806f5fbf2afbfe956617774f65831fdb46eddd83d15784\"" Jul 15 11:33:17.279483 env[1204]: time="2025-07-15T11:33:17.279425215Z" level=info msg="StartContainer for \"32958ce776dd888bc6806f5fbf2afbfe956617774f65831fdb46eddd83d15784\"" Jul 15 11:33:17.298228 systemd[1]: run-containerd-runc-k8s.io-32958ce776dd888bc6806f5fbf2afbfe956617774f65831fdb46eddd83d15784-runc.emwnP2.mount: Deactivated successfully. Jul 15 11:33:17.303960 systemd[1]: Started cri-containerd-32958ce776dd888bc6806f5fbf2afbfe956617774f65831fdb46eddd83d15784.scope. Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.311000 audit: BPF prog-id=114 op=LOAD Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2093 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332393538636537373664643838386263363830366635666266326166 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2093 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332393538636537373664643838386263363830366635666266326166 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit: BPF prog-id=115 op=LOAD Jul 15 11:33:17.312000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001df4a0 items=0 ppid=2093 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332393538636537373664643838386263363830366635666266326166 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit: BPF prog-id=116 op=LOAD Jul 15 11:33:17.312000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001df4e8 items=0 ppid=2093 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332393538636537373664643838386263363830366635666266326166 Jul 15 11:33:17.312000 audit: BPF prog-id=116 op=UNLOAD Jul 15 11:33:17.312000 audit: BPF prog-id=115 op=UNLOAD Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:17.312000 audit: BPF prog-id=117 op=LOAD Jul 15 11:33:17.312000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0001df8f8 items=0 ppid=2093 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:17.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332393538636537373664643838386263363830366635666266326166 Jul 15 11:33:17.325370 env[1204]: time="2025-07-15T11:33:17.325325223Z" level=info msg="StartContainer for \"32958ce776dd888bc6806f5fbf2afbfe956617774f65831fdb46eddd83d15784\" returns successfully" Jul 15 11:33:17.547116 kubelet[1945]: I0715 11:33:17.546972 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-6l4fm" podStartSLOduration=0.838751071 podStartE2EDuration="3.546951396s" podCreationTimestamp="2025-07-15 11:33:14 +0000 UTC" firstStartedPulling="2025-07-15 11:33:14.5578683 +0000 UTC m=+6.277845209" lastFinishedPulling="2025-07-15 11:33:17.266068625 +0000 UTC m=+8.986045534" observedRunningTime="2025-07-15 11:33:17.546719599 +0000 UTC m=+9.266696508" watchObservedRunningTime="2025-07-15 11:33:17.546951396 +0000 UTC m=+9.266928325" Jul 15 11:33:20.975711 kubelet[1945]: E0715 11:33:20.975536 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:21.410020 kubelet[1945]: E0715 11:33:21.409988 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:23.555111 sudo[1344]: pam_unix(sudo:session): session closed for user root Jul 15 11:33:23.553000 audit[1344]: USER_END pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:33:23.561738 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 15 11:33:23.561879 kernel: audit: type=1106 audit(1752579203.553:902): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:33:23.559805 sshd[1341]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:23.566241 kernel: audit: type=1104 audit(1752579203.554:903): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:33:23.554000 audit[1344]: CRED_DISP pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:33:23.562594 systemd[1]: sshd@6-10.0.0.90:22-10.0.0.1:54698.service: Deactivated successfully. Jul 15 11:33:23.563260 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:33:23.563361 systemd[1]: session-7.scope: Consumed 4.051s CPU time. Jul 15 11:33:23.563901 systemd-logind[1197]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:33:23.564779 systemd-logind[1197]: Removed session 7. Jul 15 11:33:23.556000 audit[1341]: USER_END pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.556000 audit[1341]: CRED_DISP pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.579957 kernel: audit: type=1106 audit(1752579203.556:904): pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.580007 kernel: audit: type=1104 audit(1752579203.556:905): pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:23.580034 kernel: audit: type=1131 audit(1752579203.561:906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.90:22-10.0.0.1:54698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:23.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.90:22-10.0.0.1:54698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:23.850595 kernel: audit: type=1325 audit(1752579203.841:907): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:23.850748 kernel: audit: type=1300 audit(1752579203.841:907): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd610befb0 a2=0 a3=7ffd610bef9c items=0 ppid=2067 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:23.841000 audit[2354]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:23.841000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd610befb0 a2=0 a3=7ffd610bef9c items=0 ppid=2067 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:23.841000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:23.854225 kernel: audit: type=1327 audit(1752579203.841:907): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:23.868837 kernel: audit: type=1325 audit(1752579203.860:908): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:23.868997 kernel: audit: type=1300 audit(1752579203.860:908): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd610befb0 a2=0 a3=0 items=0 ppid=2067 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:23.860000 audit[2354]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:23.860000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd610befb0 a2=0 a3=0 items=0 ppid=2067 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:23.860000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:23.885000 audit[2356]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:23.885000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcde2d2d50 a2=0 a3=7ffcde2d2d3c items=0 ppid=2067 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:23.885000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:23.890000 audit[2356]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:23.890000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcde2d2d50 a2=0 a3=0 items=0 ppid=2067 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:23.890000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:26.695000 audit[2359]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:26.695000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffdcd01bb10 a2=0 a3=7ffdcd01bafc items=0 ppid=2067 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:26.695000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:26.701000 audit[2359]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:26.701000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdcd01bb10 a2=0 a3=0 items=0 ppid=2067 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:26.701000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:26.710000 audit[2361]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:26.710000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd9aede080 a2=0 a3=7ffd9aede06c items=0 ppid=2067 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:26.710000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:26.716000 audit[2361]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:26.716000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd9aede080 a2=0 a3=0 items=0 ppid=2067 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:26.716000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:26.915008 systemd[1]: Created slice kubepods-besteffort-pod265c9032_5614_4245_93d6_b419d0e1fac4.slice. Jul 15 11:33:26.982442 kubelet[1945]: I0715 11:33:26.982302 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/265c9032-5614-4245-93d6-b419d0e1fac4-tigera-ca-bundle\") pod \"calico-typha-74d574787c-zw2tz\" (UID: \"265c9032-5614-4245-93d6-b419d0e1fac4\") " pod="calico-system/calico-typha-74d574787c-zw2tz" Jul 15 11:33:26.982442 kubelet[1945]: I0715 11:33:26.982340 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/265c9032-5614-4245-93d6-b419d0e1fac4-typha-certs\") pod \"calico-typha-74d574787c-zw2tz\" (UID: \"265c9032-5614-4245-93d6-b419d0e1fac4\") " pod="calico-system/calico-typha-74d574787c-zw2tz" Jul 15 11:33:26.982442 kubelet[1945]: I0715 11:33:26.982369 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p9zgk\" (UniqueName: \"kubernetes.io/projected/265c9032-5614-4245-93d6-b419d0e1fac4-kube-api-access-p9zgk\") pod \"calico-typha-74d574787c-zw2tz\" (UID: \"265c9032-5614-4245-93d6-b419d0e1fac4\") " pod="calico-system/calico-typha-74d574787c-zw2tz" Jul 15 11:33:27.222218 kubelet[1945]: E0715 11:33:27.222164 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:27.222658 env[1204]: time="2025-07-15T11:33:27.222619760Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-74d574787c-zw2tz,Uid:265c9032-5614-4245-93d6-b419d0e1fac4,Namespace:calico-system,Attempt:0,}" Jul 15 11:33:27.599663 env[1204]: time="2025-07-15T11:33:27.599584622Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:27.599663 env[1204]: time="2025-07-15T11:33:27.599660075Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:27.599885 env[1204]: time="2025-07-15T11:33:27.599681184Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:27.599885 env[1204]: time="2025-07-15T11:33:27.599803555Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c728d7fb9392a7876b0ab96cfbef1136c37e3511bc1997559fd3c36ae62b5e59 pid=2370 runtime=io.containerd.runc.v2 Jul 15 11:33:27.616890 systemd[1]: Started cri-containerd-c728d7fb9392a7876b0ab96cfbef1136c37e3511bc1997559fd3c36ae62b5e59.scope. Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit: BPF prog-id=118 op=LOAD Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:27.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323864376662393339326137383736623061623936636662656631 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:27.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323864376662393339326137383736623061623936636662656631 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.626000 audit: BPF prog-id=119 op=LOAD Jul 15 11:33:27.626000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000221060 items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:27.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323864376662393339326137383736623061623936636662656631 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit: BPF prog-id=120 op=LOAD Jul 15 11:33:27.627000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002210a8 items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:27.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323864376662393339326137383736623061623936636662656631 Jul 15 11:33:27.627000 audit: BPF prog-id=120 op=UNLOAD Jul 15 11:33:27.627000 audit: BPF prog-id=119 op=UNLOAD Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:27.627000 audit: BPF prog-id=121 op=LOAD Jul 15 11:33:27.627000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002214b8 items=0 ppid=2370 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:27.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323864376662393339326137383736623061623936636662656631 Jul 15 11:33:27.649297 env[1204]: time="2025-07-15T11:33:27.649249870Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-74d574787c-zw2tz,Uid:265c9032-5614-4245-93d6-b419d0e1fac4,Namespace:calico-system,Attempt:0,} returns sandbox id \"c728d7fb9392a7876b0ab96cfbef1136c37e3511bc1997559fd3c36ae62b5e59\"" Jul 15 11:33:27.650286 kubelet[1945]: E0715 11:33:27.650008 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:27.650968 env[1204]: time="2025-07-15T11:33:27.650951392Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:33:27.659190 systemd[1]: Created slice kubepods-besteffort-pod519a32a8_6663_4574_b359_90a3c5e44274.slice. Jul 15 11:33:27.687317 kubelet[1945]: I0715 11:33:27.687283 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/519a32a8-6663-4574-b359-90a3c5e44274-node-certs\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.687553 kubelet[1945]: I0715 11:33:27.687535 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/519a32a8-6663-4574-b359-90a3c5e44274-var-lib-calico\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.687660 kubelet[1945]: I0715 11:33:27.687632 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/519a32a8-6663-4574-b359-90a3c5e44274-xtables-lock\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.687760 kubelet[1945]: I0715 11:33:27.687742 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/519a32a8-6663-4574-b359-90a3c5e44274-cni-net-dir\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.687877 kubelet[1945]: I0715 11:33:27.687844 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/519a32a8-6663-4574-b359-90a3c5e44274-var-run-calico\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.688002 kubelet[1945]: I0715 11:33:27.687984 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5z584\" (UniqueName: \"kubernetes.io/projected/519a32a8-6663-4574-b359-90a3c5e44274-kube-api-access-5z584\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.688110 kubelet[1945]: I0715 11:33:27.688082 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/519a32a8-6663-4574-b359-90a3c5e44274-cni-log-dir\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.688155 kubelet[1945]: I0715 11:33:27.688124 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/519a32a8-6663-4574-b359-90a3c5e44274-flexvol-driver-host\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.688155 kubelet[1945]: I0715 11:33:27.688140 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/519a32a8-6663-4574-b359-90a3c5e44274-tigera-ca-bundle\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.688371 kubelet[1945]: I0715 11:33:27.688154 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/519a32a8-6663-4574-b359-90a3c5e44274-policysync\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.688371 kubelet[1945]: I0715 11:33:27.688167 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/519a32a8-6663-4574-b359-90a3c5e44274-lib-modules\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.688371 kubelet[1945]: I0715 11:33:27.688194 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/519a32a8-6663-4574-b359-90a3c5e44274-cni-bin-dir\") pod \"calico-node-dzjvb\" (UID: \"519a32a8-6663-4574-b359-90a3c5e44274\") " pod="calico-system/calico-node-dzjvb" Jul 15 11:33:27.709978 kubelet[1945]: E0715 11:33:27.709924 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f7hlf" podUID="99156ec4-9529-47f6-b199-77d30be5e101" Jul 15 11:33:27.733000 audit[2404]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:27.733000 audit[2404]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffdb2c8e10 a2=0 a3=7fffdb2c8dfc items=0 ppid=2067 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:27.733000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:27.739000 audit[2404]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:27.739000 audit[2404]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffdb2c8e10 a2=0 a3=0 items=0 ppid=2067 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:27.739000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:27.788632 kubelet[1945]: I0715 11:33:27.788577 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hfqvh\" (UniqueName: \"kubernetes.io/projected/99156ec4-9529-47f6-b199-77d30be5e101-kube-api-access-hfqvh\") pod \"csi-node-driver-f7hlf\" (UID: \"99156ec4-9529-47f6-b199-77d30be5e101\") " pod="calico-system/csi-node-driver-f7hlf" Jul 15 11:33:27.788632 kubelet[1945]: I0715 11:33:27.788631 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/99156ec4-9529-47f6-b199-77d30be5e101-kubelet-dir\") pod \"csi-node-driver-f7hlf\" (UID: \"99156ec4-9529-47f6-b199-77d30be5e101\") " pod="calico-system/csi-node-driver-f7hlf" Jul 15 11:33:27.788834 kubelet[1945]: I0715 11:33:27.788692 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/99156ec4-9529-47f6-b199-77d30be5e101-socket-dir\") pod \"csi-node-driver-f7hlf\" (UID: \"99156ec4-9529-47f6-b199-77d30be5e101\") " pod="calico-system/csi-node-driver-f7hlf" Jul 15 11:33:27.788834 kubelet[1945]: I0715 11:33:27.788716 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/99156ec4-9529-47f6-b199-77d30be5e101-registration-dir\") pod \"csi-node-driver-f7hlf\" (UID: \"99156ec4-9529-47f6-b199-77d30be5e101\") " pod="calico-system/csi-node-driver-f7hlf" Jul 15 11:33:27.788834 kubelet[1945]: I0715 11:33:27.788790 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/99156ec4-9529-47f6-b199-77d30be5e101-varrun\") pod \"csi-node-driver-f7hlf\" (UID: \"99156ec4-9529-47f6-b199-77d30be5e101\") " pod="calico-system/csi-node-driver-f7hlf" Jul 15 11:33:27.789842 kubelet[1945]: E0715 11:33:27.789810 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.789842 kubelet[1945]: W0715 11:33:27.789826 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.790029 kubelet[1945]: E0715 11:33:27.789863 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.792193 kubelet[1945]: E0715 11:33:27.792159 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.792251 kubelet[1945]: W0715 11:33:27.792193 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.792251 kubelet[1945]: E0715 11:33:27.792218 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.795453 kubelet[1945]: E0715 11:33:27.795433 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.795453 kubelet[1945]: W0715 11:33:27.795446 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.795529 kubelet[1945]: E0715 11:33:27.795459 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.889974 kubelet[1945]: E0715 11:33:27.889874 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.889974 kubelet[1945]: W0715 11:33:27.889896 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.889974 kubelet[1945]: E0715 11:33:27.889920 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.890264 kubelet[1945]: E0715 11:33:27.890229 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.890361 kubelet[1945]: W0715 11:33:27.890263 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.890361 kubelet[1945]: E0715 11:33:27.890304 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.890720 kubelet[1945]: E0715 11:33:27.890704 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.890720 kubelet[1945]: W0715 11:33:27.890716 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.890797 kubelet[1945]: E0715 11:33:27.890743 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.890982 kubelet[1945]: E0715 11:33:27.890963 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.891033 kubelet[1945]: W0715 11:33:27.890988 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.891033 kubelet[1945]: E0715 11:33:27.891005 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.891257 kubelet[1945]: E0715 11:33:27.891223 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.891257 kubelet[1945]: W0715 11:33:27.891248 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.891517 kubelet[1945]: E0715 11:33:27.891276 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.891517 kubelet[1945]: E0715 11:33:27.891465 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.891517 kubelet[1945]: W0715 11:33:27.891472 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.891517 kubelet[1945]: E0715 11:33:27.891484 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.891689 kubelet[1945]: E0715 11:33:27.891668 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.891689 kubelet[1945]: W0715 11:33:27.891683 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.891766 kubelet[1945]: E0715 11:33:27.891699 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.891869 kubelet[1945]: E0715 11:33:27.891853 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.891869 kubelet[1945]: W0715 11:33:27.891864 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.891950 kubelet[1945]: E0715 11:33:27.891876 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.892097 kubelet[1945]: E0715 11:33:27.892076 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.892097 kubelet[1945]: W0715 11:33:27.892087 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.892153 kubelet[1945]: E0715 11:33:27.892109 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.892258 kubelet[1945]: E0715 11:33:27.892241 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.892258 kubelet[1945]: W0715 11:33:27.892252 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.892332 kubelet[1945]: E0715 11:33:27.892277 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.892424 kubelet[1945]: E0715 11:33:27.892409 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.892424 kubelet[1945]: W0715 11:33:27.892418 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.892496 kubelet[1945]: E0715 11:33:27.892439 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.892608 kubelet[1945]: E0715 11:33:27.892595 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.892608 kubelet[1945]: W0715 11:33:27.892605 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.892660 kubelet[1945]: E0715 11:33:27.892616 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.892800 kubelet[1945]: E0715 11:33:27.892785 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.892800 kubelet[1945]: W0715 11:33:27.892794 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.892892 kubelet[1945]: E0715 11:33:27.892805 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.892998 kubelet[1945]: E0715 11:33:27.892979 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.892998 kubelet[1945]: W0715 11:33:27.892993 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.893077 kubelet[1945]: E0715 11:33:27.893010 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.893224 kubelet[1945]: E0715 11:33:27.893208 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.893224 kubelet[1945]: W0715 11:33:27.893222 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.893297 kubelet[1945]: E0715 11:33:27.893238 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.893473 kubelet[1945]: E0715 11:33:27.893456 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.893473 kubelet[1945]: W0715 11:33:27.893468 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.893549 kubelet[1945]: E0715 11:33:27.893482 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.893657 kubelet[1945]: E0715 11:33:27.893644 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.893657 kubelet[1945]: W0715 11:33:27.893656 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.893728 kubelet[1945]: E0715 11:33:27.893670 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.893915 kubelet[1945]: E0715 11:33:27.893901 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.893915 kubelet[1945]: W0715 11:33:27.893911 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.893999 kubelet[1945]: E0715 11:33:27.893927 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.894115 kubelet[1945]: E0715 11:33:27.894102 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.894115 kubelet[1945]: W0715 11:33:27.894111 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.894217 kubelet[1945]: E0715 11:33:27.894122 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.894314 kubelet[1945]: E0715 11:33:27.894301 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.894314 kubelet[1945]: W0715 11:33:27.894309 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.894411 kubelet[1945]: E0715 11:33:27.894321 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.894492 kubelet[1945]: E0715 11:33:27.894481 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.894492 kubelet[1945]: W0715 11:33:27.894489 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.894575 kubelet[1945]: E0715 11:33:27.894562 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.894717 kubelet[1945]: E0715 11:33:27.894699 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.894717 kubelet[1945]: W0715 11:33:27.894712 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.894788 kubelet[1945]: E0715 11:33:27.894728 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.894900 kubelet[1945]: E0715 11:33:27.894884 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.894900 kubelet[1945]: W0715 11:33:27.894894 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.894975 kubelet[1945]: E0715 11:33:27.894906 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.895174 kubelet[1945]: E0715 11:33:27.895156 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.895174 kubelet[1945]: W0715 11:33:27.895169 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.895174 kubelet[1945]: E0715 11:33:27.895198 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.895446 kubelet[1945]: E0715 11:33:27.895429 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.895514 kubelet[1945]: W0715 11:33:27.895449 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.895514 kubelet[1945]: E0715 11:33:27.895457 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.900684 kubelet[1945]: E0715 11:33:27.900663 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:27.900684 kubelet[1945]: W0715 11:33:27.900673 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:27.900684 kubelet[1945]: E0715 11:33:27.900681 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:27.971719 env[1204]: time="2025-07-15T11:33:27.971664985Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-dzjvb,Uid:519a32a8-6663-4574-b359-90a3c5e44274,Namespace:calico-system,Attempt:0,}" Jul 15 11:33:27.989234 env[1204]: time="2025-07-15T11:33:27.989151380Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:27.989410 env[1204]: time="2025-07-15T11:33:27.989217854Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:27.989410 env[1204]: time="2025-07-15T11:33:27.989228435Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:27.989495 env[1204]: time="2025-07-15T11:33:27.989431857Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/54f60c7968236298daa1ab01dee35dce219074b9babcd876a2eb5339574cc0fa pid=2445 runtime=io.containerd.runc.v2 Jul 15 11:33:27.998798 systemd[1]: Started cri-containerd-54f60c7968236298daa1ab01dee35dce219074b9babcd876a2eb5339574cc0fa.scope. Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit: BPF prog-id=122 op=LOAD Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2445 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534663630633739363832333632393864616131616230316465653335 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2445 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534663630633739363832333632393864616131616230316465653335 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit: BPF prog-id=123 op=LOAD Jul 15 11:33:28.008000 audit[2455]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001ddfa0 items=0 ppid=2445 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534663630633739363832333632393864616131616230316465653335 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.008000 audit: BPF prog-id=124 op=LOAD Jul 15 11:33:28.008000 audit[2455]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001ddfe8 items=0 ppid=2445 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534663630633739363832333632393864616131616230316465653335 Jul 15 11:33:28.009000 audit: BPF prog-id=124 op=UNLOAD Jul 15 11:33:28.009000 audit: BPF prog-id=123 op=UNLOAD Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { perfmon } for pid=2455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit[2455]: AVC avc: denied { bpf } for pid=2455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:28.009000 audit: BPF prog-id=125 op=LOAD Jul 15 11:33:28.009000 audit[2455]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003163f8 items=0 ppid=2445 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:28.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534663630633739363832333632393864616131616230316465653335 Jul 15 11:33:28.018170 env[1204]: time="2025-07-15T11:33:28.018133139Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-dzjvb,Uid:519a32a8-6663-4574-b359-90a3c5e44274,Namespace:calico-system,Attempt:0,} returns sandbox id \"54f60c7968236298daa1ab01dee35dce219074b9babcd876a2eb5339574cc0fa\"" Jul 15 11:33:29.371254 kubelet[1945]: E0715 11:33:29.371197 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f7hlf" podUID="99156ec4-9529-47f6-b199-77d30be5e101" Jul 15 11:33:29.565499 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3330003656.mount: Deactivated successfully. Jul 15 11:33:30.348967 env[1204]: time="2025-07-15T11:33:30.348902972Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:30.351030 env[1204]: time="2025-07-15T11:33:30.350996318Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:30.352539 env[1204]: time="2025-07-15T11:33:30.352493794Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:30.354120 env[1204]: time="2025-07-15T11:33:30.354085587Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:30.354530 env[1204]: time="2025-07-15T11:33:30.354497391Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 15 11:33:30.357123 env[1204]: time="2025-07-15T11:33:30.356263343Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:33:30.362784 env[1204]: time="2025-07-15T11:33:30.362747967Z" level=info msg="CreateContainer within sandbox \"c728d7fb9392a7876b0ab96cfbef1136c37e3511bc1997559fd3c36ae62b5e59\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:33:30.376730 env[1204]: time="2025-07-15T11:33:30.376677501Z" level=info msg="CreateContainer within sandbox \"c728d7fb9392a7876b0ab96cfbef1136c37e3511bc1997559fd3c36ae62b5e59\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"2e85da628056e8b3960066fb609c90004d9148ead7db4c98e1c08a9f746dd0d6\"" Jul 15 11:33:30.377211 env[1204]: time="2025-07-15T11:33:30.377155490Z" level=info msg="StartContainer for \"2e85da628056e8b3960066fb609c90004d9148ead7db4c98e1c08a9f746dd0d6\"" Jul 15 11:33:30.397530 systemd[1]: Started cri-containerd-2e85da628056e8b3960066fb609c90004d9148ead7db4c98e1c08a9f746dd0d6.scope. Jul 15 11:33:30.421247 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 15 11:33:30.421415 kernel: audit: type=1400 audit(1752579210.417:953): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.426493 kernel: audit: type=1400 audit(1752579210.417:954): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.426560 kernel: audit: type=1400 audit(1752579210.417:955): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.432432 kernel: audit: type=1400 audit(1752579210.417:956): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.435793 kernel: audit: type=1400 audit(1752579210.417:957): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.435835 kernel: audit: type=1400 audit(1752579210.417:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.438688 kernel: audit: type=1400 audit(1752579210.417:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.444508 kernel: audit: type=1400 audit(1752579210.417:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.444612 kernel: audit: type=1400 audit(1752579210.417:961): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.451014 kernel: audit: type=1400 audit(1752579210.421:962): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.421000 audit: BPF prog-id=126 op=LOAD Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2370 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:30.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383564613632383035366538623339363030363666623630396339 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2370 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:30.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383564613632383035366538623339363030363666623630396339 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.422000 audit: BPF prog-id=127 op=LOAD Jul 15 11:33:30.422000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001eda10 items=0 ppid=2370 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:30.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383564613632383035366538623339363030363666623630396339 Jul 15 11:33:30.428000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.428000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.428000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.428000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.428000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.428000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.428000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.428000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.428000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.428000 audit: BPF prog-id=128 op=LOAD Jul 15 11:33:30.428000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001eda58 items=0 ppid=2370 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:30.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383564613632383035366538623339363030363666623630396339 Jul 15 11:33:30.431000 audit: BPF prog-id=128 op=UNLOAD Jul 15 11:33:30.431000 audit: BPF prog-id=127 op=UNLOAD Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:30.431000 audit: BPF prog-id=129 op=LOAD Jul 15 11:33:30.431000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001ede68 items=0 ppid=2370 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:30.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383564613632383035366538623339363030363666623630396339 Jul 15 11:33:30.579642 env[1204]: time="2025-07-15T11:33:30.579578507Z" level=info msg="StartContainer for \"2e85da628056e8b3960066fb609c90004d9148ead7db4c98e1c08a9f746dd0d6\" returns successfully" Jul 15 11:33:31.371702 kubelet[1945]: E0715 11:33:31.371655 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f7hlf" podUID="99156ec4-9529-47f6-b199-77d30be5e101" Jul 15 11:33:31.429943 kubelet[1945]: E0715 11:33:31.429901 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:31.439120 kubelet[1945]: I0715 11:33:31.439049 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-74d574787c-zw2tz" podStartSLOduration=2.733914362 podStartE2EDuration="5.439025996s" podCreationTimestamp="2025-07-15 11:33:26 +0000 UTC" firstStartedPulling="2025-07-15 11:33:27.650691603 +0000 UTC m=+19.370668512" lastFinishedPulling="2025-07-15 11:33:30.355803207 +0000 UTC m=+22.075780146" observedRunningTime="2025-07-15 11:33:31.438803848 +0000 UTC m=+23.158780757" watchObservedRunningTime="2025-07-15 11:33:31.439025996 +0000 UTC m=+23.159002905" Jul 15 11:33:31.494565 kubelet[1945]: E0715 11:33:31.494517 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.494565 kubelet[1945]: W0715 11:33:31.494544 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.494565 kubelet[1945]: E0715 11:33:31.494574 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.494791 kubelet[1945]: E0715 11:33:31.494772 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.494791 kubelet[1945]: W0715 11:33:31.494780 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.494791 kubelet[1945]: E0715 11:33:31.494787 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.494935 kubelet[1945]: E0715 11:33:31.494920 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.494935 kubelet[1945]: W0715 11:33:31.494929 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.494935 kubelet[1945]: E0715 11:33:31.494936 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.496888 kubelet[1945]: E0715 11:33:31.496848 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.496888 kubelet[1945]: W0715 11:33:31.496879 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.496965 kubelet[1945]: E0715 11:33:31.496907 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.497147 kubelet[1945]: E0715 11:33:31.497130 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.497147 kubelet[1945]: W0715 11:33:31.497141 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.497147 kubelet[1945]: E0715 11:33:31.497150 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.497374 kubelet[1945]: E0715 11:33:31.497359 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.497374 kubelet[1945]: W0715 11:33:31.497370 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.497427 kubelet[1945]: E0715 11:33:31.497377 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.497529 kubelet[1945]: E0715 11:33:31.497512 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.497529 kubelet[1945]: W0715 11:33:31.497522 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.497529 kubelet[1945]: E0715 11:33:31.497529 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.497675 kubelet[1945]: E0715 11:33:31.497661 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.497675 kubelet[1945]: W0715 11:33:31.497671 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.497730 kubelet[1945]: E0715 11:33:31.497678 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.497871 kubelet[1945]: E0715 11:33:31.497851 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.497871 kubelet[1945]: W0715 11:33:31.497861 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.497871 kubelet[1945]: E0715 11:33:31.497868 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.498001 kubelet[1945]: E0715 11:33:31.497988 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.498001 kubelet[1945]: W0715 11:33:31.497998 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.498049 kubelet[1945]: E0715 11:33:31.498005 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.498153 kubelet[1945]: E0715 11:33:31.498141 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.498153 kubelet[1945]: W0715 11:33:31.498150 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.498220 kubelet[1945]: E0715 11:33:31.498157 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.498325 kubelet[1945]: E0715 11:33:31.498312 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.498325 kubelet[1945]: W0715 11:33:31.498322 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.498384 kubelet[1945]: E0715 11:33:31.498329 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.498504 kubelet[1945]: E0715 11:33:31.498492 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.498504 kubelet[1945]: W0715 11:33:31.498502 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.498558 kubelet[1945]: E0715 11:33:31.498509 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.498670 kubelet[1945]: E0715 11:33:31.498658 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.498670 kubelet[1945]: W0715 11:33:31.498668 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.498715 kubelet[1945]: E0715 11:33:31.498675 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.498827 kubelet[1945]: E0715 11:33:31.498816 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.498827 kubelet[1945]: W0715 11:33:31.498825 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.498880 kubelet[1945]: E0715 11:33:31.498832 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.520129 kubelet[1945]: E0715 11:33:31.520087 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.520129 kubelet[1945]: W0715 11:33:31.520116 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.520348 kubelet[1945]: E0715 11:33:31.520139 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.520532 kubelet[1945]: E0715 11:33:31.520503 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.520592 kubelet[1945]: W0715 11:33:31.520533 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.520592 kubelet[1945]: E0715 11:33:31.520573 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.520938 kubelet[1945]: E0715 11:33:31.520919 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.520938 kubelet[1945]: W0715 11:33:31.520934 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.521041 kubelet[1945]: E0715 11:33:31.520959 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.521273 kubelet[1945]: E0715 11:33:31.521246 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.521273 kubelet[1945]: W0715 11:33:31.521270 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.521350 kubelet[1945]: E0715 11:33:31.521289 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.521570 kubelet[1945]: E0715 11:33:31.521549 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.521570 kubelet[1945]: W0715 11:33:31.521569 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.521648 kubelet[1945]: E0715 11:33:31.521608 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.521817 kubelet[1945]: E0715 11:33:31.521796 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.521920 kubelet[1945]: W0715 11:33:31.521884 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.522083 kubelet[1945]: E0715 11:33:31.522008 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.522123 kubelet[1945]: E0715 11:33:31.522112 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.522123 kubelet[1945]: W0715 11:33:31.522120 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.522217 kubelet[1945]: E0715 11:33:31.522176 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.522355 kubelet[1945]: E0715 11:33:31.522337 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.522355 kubelet[1945]: W0715 11:33:31.522352 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.522451 kubelet[1945]: E0715 11:33:31.522371 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.522616 kubelet[1945]: E0715 11:33:31.522602 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.522616 kubelet[1945]: W0715 11:33:31.522614 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.522699 kubelet[1945]: E0715 11:33:31.522630 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.522915 kubelet[1945]: E0715 11:33:31.522898 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.522915 kubelet[1945]: W0715 11:33:31.522911 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.523011 kubelet[1945]: E0715 11:33:31.522926 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.523168 kubelet[1945]: E0715 11:33:31.523148 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.523168 kubelet[1945]: W0715 11:33:31.523160 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.523286 kubelet[1945]: E0715 11:33:31.523177 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.523411 kubelet[1945]: E0715 11:33:31.523389 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.523465 kubelet[1945]: W0715 11:33:31.523419 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.523526 kubelet[1945]: E0715 11:33:31.523509 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.523814 kubelet[1945]: E0715 11:33:31.523801 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.523814 kubelet[1945]: W0715 11:33:31.523811 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.523925 kubelet[1945]: E0715 11:33:31.523878 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.524331 kubelet[1945]: E0715 11:33:31.524003 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.524331 kubelet[1945]: W0715 11:33:31.524022 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.524331 kubelet[1945]: E0715 11:33:31.524043 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.524331 kubelet[1945]: E0715 11:33:31.524286 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.524331 kubelet[1945]: W0715 11:33:31.524296 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.524331 kubelet[1945]: E0715 11:33:31.524311 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.524537 kubelet[1945]: E0715 11:33:31.524507 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.524537 kubelet[1945]: W0715 11:33:31.524518 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.524537 kubelet[1945]: E0715 11:33:31.524529 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.524785 kubelet[1945]: E0715 11:33:31.524768 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.524836 kubelet[1945]: W0715 11:33:31.524794 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.524836 kubelet[1945]: E0715 11:33:31.524808 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.525305 kubelet[1945]: E0715 11:33:31.525289 1945 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:33:31.525305 kubelet[1945]: W0715 11:33:31.525301 1945 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:33:31.525535 kubelet[1945]: E0715 11:33:31.525310 1945 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:33:31.793605 env[1204]: time="2025-07-15T11:33:31.793532775Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:31.795917 env[1204]: time="2025-07-15T11:33:31.795872835Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:31.797626 env[1204]: time="2025-07-15T11:33:31.797602236Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:31.799084 env[1204]: time="2025-07-15T11:33:31.799049437Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:31.799505 env[1204]: time="2025-07-15T11:33:31.799471932Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 15 11:33:31.801746 env[1204]: time="2025-07-15T11:33:31.801710290Z" level=info msg="CreateContainer within sandbox \"54f60c7968236298daa1ab01dee35dce219074b9babcd876a2eb5339574cc0fa\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:33:32.365027 env[1204]: time="2025-07-15T11:33:32.364954660Z" level=info msg="CreateContainer within sandbox \"54f60c7968236298daa1ab01dee35dce219074b9babcd876a2eb5339574cc0fa\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"405458d4ad291100b7063f6e6700c809385a229c78942d00e0a9d25c2e49d1d8\"" Jul 15 11:33:32.365877 env[1204]: time="2025-07-15T11:33:32.365844081Z" level=info msg="StartContainer for \"405458d4ad291100b7063f6e6700c809385a229c78942d00e0a9d25c2e49d1d8\"" Jul 15 11:33:32.384753 systemd[1]: Started cri-containerd-405458d4ad291100b7063f6e6700c809385a229c78942d00e0a9d25c2e49d1d8.scope. Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f7fd800bc28 items=0 ppid=2445 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:32.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430353435386434616432393131303062373036336636653637303063 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit: BPF prog-id=130 op=LOAD Jul 15 11:33:32.393000 audit[2561]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00031cbf8 items=0 ppid=2445 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:32.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430353435386434616432393131303062373036336636653637303063 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit: BPF prog-id=131 op=LOAD Jul 15 11:33:32.393000 audit[2561]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00031cc48 items=0 ppid=2445 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:32.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430353435386434616432393131303062373036336636653637303063 Jul 15 11:33:32.393000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:33:32.393000 audit: BPF prog-id=130 op=UNLOAD Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:32.393000 audit: BPF prog-id=132 op=LOAD Jul 15 11:33:32.393000 audit[2561]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00031ccd8 items=0 ppid=2445 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:32.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430353435386434616432393131303062373036336636653637303063 Jul 15 11:33:32.410767 env[1204]: time="2025-07-15T11:33:32.410713226Z" level=info msg="StartContainer for \"405458d4ad291100b7063f6e6700c809385a229c78942d00e0a9d25c2e49d1d8\" returns successfully" Jul 15 11:33:32.418473 systemd[1]: cri-containerd-405458d4ad291100b7063f6e6700c809385a229c78942d00e0a9d25c2e49d1d8.scope: Deactivated successfully. Jul 15 11:33:32.422000 audit: BPF prog-id=132 op=UNLOAD Jul 15 11:33:32.432479 kubelet[1945]: I0715 11:33:32.432447 1945 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:33:32.432834 kubelet[1945]: E0715 11:33:32.432784 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:32.666881 env[1204]: time="2025-07-15T11:33:32.666818600Z" level=info msg="shim disconnected" id=405458d4ad291100b7063f6e6700c809385a229c78942d00e0a9d25c2e49d1d8 Jul 15 11:33:32.666881 env[1204]: time="2025-07-15T11:33:32.666864336Z" level=warning msg="cleaning up after shim disconnected" id=405458d4ad291100b7063f6e6700c809385a229c78942d00e0a9d25c2e49d1d8 namespace=k8s.io Jul 15 11:33:32.666881 env[1204]: time="2025-07-15T11:33:32.666873092Z" level=info msg="cleaning up dead shim" Jul 15 11:33:32.673224 env[1204]: time="2025-07-15T11:33:32.673172113Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:33:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2606 runtime=io.containerd.runc.v2\n" Jul 15 11:33:33.251393 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-405458d4ad291100b7063f6e6700c809385a229c78942d00e0a9d25c2e49d1d8-rootfs.mount: Deactivated successfully. Jul 15 11:33:33.370913 kubelet[1945]: E0715 11:33:33.370853 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f7hlf" podUID="99156ec4-9529-47f6-b199-77d30be5e101" Jul 15 11:33:33.436592 env[1204]: time="2025-07-15T11:33:33.436551586Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:33:35.371283 kubelet[1945]: E0715 11:33:35.371205 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f7hlf" podUID="99156ec4-9529-47f6-b199-77d30be5e101" Jul 15 11:33:37.164909 env[1204]: time="2025-07-15T11:33:37.164847656Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:37.170025 env[1204]: time="2025-07-15T11:33:37.169976109Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:37.171782 env[1204]: time="2025-07-15T11:33:37.171741244Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:37.173698 env[1204]: time="2025-07-15T11:33:37.173661271Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:37.174079 env[1204]: time="2025-07-15T11:33:37.174045443Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 15 11:33:37.182135 env[1204]: time="2025-07-15T11:33:37.182080476Z" level=info msg="CreateContainer within sandbox \"54f60c7968236298daa1ab01dee35dce219074b9babcd876a2eb5339574cc0fa\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:33:37.199285 env[1204]: time="2025-07-15T11:33:37.199236742Z" level=info msg="CreateContainer within sandbox \"54f60c7968236298daa1ab01dee35dce219074b9babcd876a2eb5339574cc0fa\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d19da7b57f9e8b06a380e843fdd8d92ab322375157a8318ee397b21d911c1e5d\"" Jul 15 11:33:37.199743 env[1204]: time="2025-07-15T11:33:37.199718596Z" level=info msg="StartContainer for \"d19da7b57f9e8b06a380e843fdd8d92ab322375157a8318ee397b21d911c1e5d\"" Jul 15 11:33:37.219380 systemd[1]: run-containerd-runc-k8s.io-d19da7b57f9e8b06a380e843fdd8d92ab322375157a8318ee397b21d911c1e5d-runc.C2t6uF.mount: Deactivated successfully. Jul 15 11:33:37.220659 systemd[1]: Started cri-containerd-d19da7b57f9e8b06a380e843fdd8d92ab322375157a8318ee397b21d911c1e5d.scope. Jul 15 11:33:37.232000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.237774 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 15 11:33:37.237877 kernel: audit: type=1400 audit(1752579217.232:978): avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.237975 kernel: audit: type=1300 audit(1752579217.232:978): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00019f6b0 a2=3c a3=7ff7746df718 items=0 ppid=2445 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:37.232000 audit[2625]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00019f6b0 a2=3c a3=7ff7746df718 items=0 ppid=2445 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:37.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431396461376235376639653862303661333830653834336664643864 Jul 15 11:33:37.246173 kernel: audit: type=1327 audit(1752579217.232:978): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431396461376235376639653862303661333830653834336664643864 Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.252248 kernel: audit: type=1400 audit(1752579217.233:979): avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.252337 kernel: audit: type=1400 audit(1752579217.233:979): avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.252366 kernel: audit: type=1400 audit(1752579217.233:979): avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.257891 kernel: audit: type=1400 audit(1752579217.233:979): avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.261048 kernel: audit: type=1400 audit(1752579217.233:979): avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.264202 kernel: audit: type=1400 audit(1752579217.233:979): avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.267397 env[1204]: time="2025-07-15T11:33:37.266479158Z" level=info msg="StartContainer for \"d19da7b57f9e8b06a380e843fdd8d92ab322375157a8318ee397b21d911c1e5d\" returns successfully" Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.233000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.233000 audit: BPF prog-id=133 op=LOAD Jul 15 11:33:37.233000 audit[2625]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019f9d8 a2=78 a3=c00028b928 items=0 ppid=2445 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:37.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431396461376235376639653862303661333830653834336664643864 Jul 15 11:33:37.241000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.241000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.268204 kernel: audit: type=1400 audit(1752579217.233:979): avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.241000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.241000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.241000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.241000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.241000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.241000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.241000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.241000 audit: BPF prog-id=134 op=LOAD Jul 15 11:33:37.241000 audit[2625]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00019f770 a2=78 a3=c00028b978 items=0 ppid=2445 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:37.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431396461376235376639653862303661333830653834336664643864 Jul 15 11:33:37.245000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:33:37.245000 audit: BPF prog-id=133 op=UNLOAD Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:37.245000 audit: BPF prog-id=135 op=LOAD Jul 15 11:33:37.245000 audit[2625]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019fc30 a2=78 a3=c00028ba08 items=0 ppid=2445 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:37.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431396461376235376639653862303661333830653834336664643864 Jul 15 11:33:37.373550 kubelet[1945]: E0715 11:33:37.373485 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f7hlf" podUID="99156ec4-9529-47f6-b199-77d30be5e101" Jul 15 11:33:38.676794 env[1204]: time="2025-07-15T11:33:38.676710767Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:33:38.678655 systemd[1]: cri-containerd-d19da7b57f9e8b06a380e843fdd8d92ab322375157a8318ee397b21d911c1e5d.scope: Deactivated successfully. Jul 15 11:33:38.681000 audit: BPF prog-id=135 op=UNLOAD Jul 15 11:33:38.694858 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d19da7b57f9e8b06a380e843fdd8d92ab322375157a8318ee397b21d911c1e5d-rootfs.mount: Deactivated successfully. Jul 15 11:33:38.733068 kubelet[1945]: I0715 11:33:38.733036 1945 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 15 11:33:39.031581 systemd[1]: Created slice kubepods-besteffort-podc5a062a0_c220_4591_9e18_d99e0c0cf56c.slice. Jul 15 11:33:39.033346 env[1204]: time="2025-07-15T11:33:39.033280729Z" level=info msg="shim disconnected" id=d19da7b57f9e8b06a380e843fdd8d92ab322375157a8318ee397b21d911c1e5d Jul 15 11:33:39.033346 env[1204]: time="2025-07-15T11:33:39.033338507Z" level=warning msg="cleaning up after shim disconnected" id=d19da7b57f9e8b06a380e843fdd8d92ab322375157a8318ee397b21d911c1e5d namespace=k8s.io Jul 15 11:33:39.033460 env[1204]: time="2025-07-15T11:33:39.033351561Z" level=info msg="cleaning up dead shim" Jul 15 11:33:39.040497 systemd[1]: Created slice kubepods-burstable-pod6afb2d3f_5c1b_46b4_b75e_d452cc71537d.slice. Jul 15 11:33:39.044478 env[1204]: time="2025-07-15T11:33:39.044436217Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:33:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2666 runtime=io.containerd.runc.v2\n" Jul 15 11:33:39.046276 systemd[1]: Created slice kubepods-besteffort-pod3bc095c7_aa20_4cd8_bd19_7dafcdd859ff.slice. Jul 15 11:33:39.050837 kubelet[1945]: I0715 11:33:39.050807 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/6afb2d3f-5c1b-46b4-b75e-d452cc71537d-config-volume\") pod \"coredns-668d6bf9bc-vzxgn\" (UID: \"6afb2d3f-5c1b-46b4-b75e-d452cc71537d\") " pod="kube-system/coredns-668d6bf9bc-vzxgn" Jul 15 11:33:39.051006 kubelet[1945]: I0715 11:33:39.050985 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/129c4ac3-7f2d-460d-8ef9-125b67850db7-tigera-ca-bundle\") pod \"calico-kube-controllers-85f8d685bc-zmqzr\" (UID: \"129c4ac3-7f2d-460d-8ef9-125b67850db7\") " pod="calico-system/calico-kube-controllers-85f8d685bc-zmqzr" Jul 15 11:33:39.051124 kubelet[1945]: I0715 11:33:39.051106 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c5a062a0-c220-4591-9e18-d99e0c0cf56c-whisker-backend-key-pair\") pod \"whisker-7d9f85f7fc-d2ztr\" (UID: \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\") " pod="calico-system/whisker-7d9f85f7fc-d2ztr" Jul 15 11:33:39.051312 kubelet[1945]: I0715 11:33:39.051269 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/ad8aa757-a79e-4464-bdcb-025b9e566728-calico-apiserver-certs\") pod \"calico-apiserver-95cf67764-44khd\" (UID: \"ad8aa757-a79e-4464-bdcb-025b9e566728\") " pod="calico-apiserver/calico-apiserver-95cf67764-44khd" Jul 15 11:33:39.051312 kubelet[1945]: I0715 11:33:39.051295 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mpmwq\" (UniqueName: \"kubernetes.io/projected/96cc5b07-a2aa-4209-83e0-b3b0bd5789c1-kube-api-access-mpmwq\") pod \"goldmane-768f4c5c69-rphg6\" (UID: \"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1\") " pod="calico-system/goldmane-768f4c5c69-rphg6" Jul 15 11:33:39.051531 kubelet[1945]: I0715 11:33:39.051330 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b6ck6\" (UniqueName: \"kubernetes.io/projected/3bc095c7-aa20-4cd8-bd19-7dafcdd859ff-kube-api-access-b6ck6\") pod \"calico-apiserver-95cf67764-w725p\" (UID: \"3bc095c7-aa20-4cd8-bd19-7dafcdd859ff\") " pod="calico-apiserver/calico-apiserver-95cf67764-w725p" Jul 15 11:33:39.051531 kubelet[1945]: I0715 11:33:39.051360 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sbpd8\" (UniqueName: \"kubernetes.io/projected/c5a062a0-c220-4591-9e18-d99e0c0cf56c-kube-api-access-sbpd8\") pod \"whisker-7d9f85f7fc-d2ztr\" (UID: \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\") " pod="calico-system/whisker-7d9f85f7fc-d2ztr" Jul 15 11:33:39.051531 kubelet[1945]: I0715 11:33:39.051387 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jcfbz\" (UniqueName: \"kubernetes.io/projected/ad8aa757-a79e-4464-bdcb-025b9e566728-kube-api-access-jcfbz\") pod \"calico-apiserver-95cf67764-44khd\" (UID: \"ad8aa757-a79e-4464-bdcb-025b9e566728\") " pod="calico-apiserver/calico-apiserver-95cf67764-44khd" Jul 15 11:33:39.051531 kubelet[1945]: I0715 11:33:39.051403 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gxks9\" (UniqueName: \"kubernetes.io/projected/272bb4b0-cbde-4852-94b1-dcd2390d1612-kube-api-access-gxks9\") pod \"coredns-668d6bf9bc-x72mh\" (UID: \"272bb4b0-cbde-4852-94b1-dcd2390d1612\") " pod="kube-system/coredns-668d6bf9bc-x72mh" Jul 15 11:33:39.051531 kubelet[1945]: I0715 11:33:39.051420 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c5a062a0-c220-4591-9e18-d99e0c0cf56c-whisker-ca-bundle\") pod \"whisker-7d9f85f7fc-d2ztr\" (UID: \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\") " pod="calico-system/whisker-7d9f85f7fc-d2ztr" Jul 15 11:33:39.051676 kubelet[1945]: I0715 11:33:39.051436 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/96cc5b07-a2aa-4209-83e0-b3b0bd5789c1-goldmane-key-pair\") pod \"goldmane-768f4c5c69-rphg6\" (UID: \"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1\") " pod="calico-system/goldmane-768f4c5c69-rphg6" Jul 15 11:33:39.051676 kubelet[1945]: I0715 11:33:39.051451 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/96cc5b07-a2aa-4209-83e0-b3b0bd5789c1-config\") pod \"goldmane-768f4c5c69-rphg6\" (UID: \"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1\") " pod="calico-system/goldmane-768f4c5c69-rphg6" Jul 15 11:33:39.051676 kubelet[1945]: I0715 11:33:39.051476 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/272bb4b0-cbde-4852-94b1-dcd2390d1612-config-volume\") pod \"coredns-668d6bf9bc-x72mh\" (UID: \"272bb4b0-cbde-4852-94b1-dcd2390d1612\") " pod="kube-system/coredns-668d6bf9bc-x72mh" Jul 15 11:33:39.051676 kubelet[1945]: I0715 11:33:39.051490 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/3bc095c7-aa20-4cd8-bd19-7dafcdd859ff-calico-apiserver-certs\") pod \"calico-apiserver-95cf67764-w725p\" (UID: \"3bc095c7-aa20-4cd8-bd19-7dafcdd859ff\") " pod="calico-apiserver/calico-apiserver-95cf67764-w725p" Jul 15 11:33:39.051676 kubelet[1945]: I0715 11:33:39.051511 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/96cc5b07-a2aa-4209-83e0-b3b0bd5789c1-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-rphg6\" (UID: \"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1\") " pod="calico-system/goldmane-768f4c5c69-rphg6" Jul 15 11:33:39.051794 kubelet[1945]: I0715 11:33:39.051529 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s46m2\" (UniqueName: \"kubernetes.io/projected/129c4ac3-7f2d-460d-8ef9-125b67850db7-kube-api-access-s46m2\") pod \"calico-kube-controllers-85f8d685bc-zmqzr\" (UID: \"129c4ac3-7f2d-460d-8ef9-125b67850db7\") " pod="calico-system/calico-kube-controllers-85f8d685bc-zmqzr" Jul 15 11:33:39.051794 kubelet[1945]: I0715 11:33:39.051584 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d8xl5\" (UniqueName: \"kubernetes.io/projected/6afb2d3f-5c1b-46b4-b75e-d452cc71537d-kube-api-access-d8xl5\") pod \"coredns-668d6bf9bc-vzxgn\" (UID: \"6afb2d3f-5c1b-46b4-b75e-d452cc71537d\") " pod="kube-system/coredns-668d6bf9bc-vzxgn" Jul 15 11:33:39.051729 systemd[1]: Created slice kubepods-besteffort-podad8aa757_a79e_4464_bdcb_025b9e566728.slice. Jul 15 11:33:39.064757 systemd[1]: Created slice kubepods-besteffort-pod96cc5b07_a2aa_4209_83e0_b3b0bd5789c1.slice. Jul 15 11:33:39.069047 systemd[1]: Created slice kubepods-besteffort-pod129c4ac3_7f2d_460d_8ef9_125b67850db7.slice. Jul 15 11:33:39.075527 systemd[1]: Created slice kubepods-burstable-pod272bb4b0_cbde_4852_94b1_dcd2390d1612.slice. Jul 15 11:33:39.337322 env[1204]: time="2025-07-15T11:33:39.337171881Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7d9f85f7fc-d2ztr,Uid:c5a062a0-c220-4591-9e18-d99e0c0cf56c,Namespace:calico-system,Attempt:0,}" Jul 15 11:33:39.344626 kubelet[1945]: E0715 11:33:39.344591 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:39.345392 env[1204]: time="2025-07-15T11:33:39.345222760Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vzxgn,Uid:6afb2d3f-5c1b-46b4-b75e-d452cc71537d,Namespace:kube-system,Attempt:0,}" Jul 15 11:33:39.349874 env[1204]: time="2025-07-15T11:33:39.349838828Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-95cf67764-w725p,Uid:3bc095c7-aa20-4cd8-bd19-7dafcdd859ff,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:33:39.363376 env[1204]: time="2025-07-15T11:33:39.363336586Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-95cf67764-44khd,Uid:ad8aa757-a79e-4464-bdcb-025b9e566728,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:33:39.367364 env[1204]: time="2025-07-15T11:33:39.367333672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-rphg6,Uid:96cc5b07-a2aa-4209-83e0-b3b0bd5789c1,Namespace:calico-system,Attempt:0,}" Jul 15 11:33:39.374166 env[1204]: time="2025-07-15T11:33:39.374122391Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85f8d685bc-zmqzr,Uid:129c4ac3-7f2d-460d-8ef9-125b67850db7,Namespace:calico-system,Attempt:0,}" Jul 15 11:33:39.376586 systemd[1]: Created slice kubepods-besteffort-pod99156ec4_9529_47f6_b199_77d30be5e101.slice. Jul 15 11:33:39.378372 kubelet[1945]: E0715 11:33:39.377319 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:39.379390 env[1204]: time="2025-07-15T11:33:39.379354246Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-x72mh,Uid:272bb4b0-cbde-4852-94b1-dcd2390d1612,Namespace:kube-system,Attempt:0,}" Jul 15 11:33:39.379681 env[1204]: time="2025-07-15T11:33:39.379368723Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f7hlf,Uid:99156ec4-9529-47f6-b199-77d30be5e101,Namespace:calico-system,Attempt:0,}" Jul 15 11:33:39.437120 env[1204]: time="2025-07-15T11:33:39.437034125Z" level=error msg="Failed to destroy network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.437409 env[1204]: time="2025-07-15T11:33:39.437379162Z" level=error msg="encountered an error cleaning up failed sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.437474 env[1204]: time="2025-07-15T11:33:39.437427523Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-95cf67764-w725p,Uid:3bc095c7-aa20-4cd8-bd19-7dafcdd859ff,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.437690 kubelet[1945]: E0715 11:33:39.437647 1945 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.437761 kubelet[1945]: E0715 11:33:39.437742 1945 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-95cf67764-w725p" Jul 15 11:33:39.437788 kubelet[1945]: E0715 11:33:39.437773 1945 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-95cf67764-w725p" Jul 15 11:33:39.437847 kubelet[1945]: E0715 11:33:39.437816 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-95cf67764-w725p_calico-apiserver(3bc095c7-aa20-4cd8-bd19-7dafcdd859ff)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-95cf67764-w725p_calico-apiserver(3bc095c7-aa20-4cd8-bd19-7dafcdd859ff)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-95cf67764-w725p" podUID="3bc095c7-aa20-4cd8-bd19-7dafcdd859ff" Jul 15 11:33:39.444913 env[1204]: time="2025-07-15T11:33:39.444866552Z" level=error msg="Failed to destroy network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.445244 env[1204]: time="2025-07-15T11:33:39.445207683Z" level=error msg="encountered an error cleaning up failed sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.445788 env[1204]: time="2025-07-15T11:33:39.445754009Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vzxgn,Uid:6afb2d3f-5c1b-46b4-b75e-d452cc71537d,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.446037 kubelet[1945]: E0715 11:33:39.445993 1945 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.446112 kubelet[1945]: E0715 11:33:39.446074 1945 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-vzxgn" Jul 15 11:33:39.446112 kubelet[1945]: E0715 11:33:39.446097 1945 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-vzxgn" Jul 15 11:33:39.446168 kubelet[1945]: E0715 11:33:39.446142 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-vzxgn_kube-system(6afb2d3f-5c1b-46b4-b75e-d452cc71537d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-vzxgn_kube-system(6afb2d3f-5c1b-46b4-b75e-d452cc71537d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-vzxgn" podUID="6afb2d3f-5c1b-46b4-b75e-d452cc71537d" Jul 15 11:33:39.452521 env[1204]: time="2025-07-15T11:33:39.452445415Z" level=error msg="Failed to destroy network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.452852 env[1204]: time="2025-07-15T11:33:39.452816422Z" level=error msg="encountered an error cleaning up failed sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.453089 env[1204]: time="2025-07-15T11:33:39.453042286Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7d9f85f7fc-d2ztr,Uid:c5a062a0-c220-4591-9e18-d99e0c0cf56c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.453463 kubelet[1945]: E0715 11:33:39.453421 1945 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.453526 kubelet[1945]: E0715 11:33:39.453492 1945 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7d9f85f7fc-d2ztr" Jul 15 11:33:39.453526 kubelet[1945]: E0715 11:33:39.453514 1945 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7d9f85f7fc-d2ztr" Jul 15 11:33:39.453584 kubelet[1945]: E0715 11:33:39.453555 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7d9f85f7fc-d2ztr_calico-system(c5a062a0-c220-4591-9e18-d99e0c0cf56c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7d9f85f7fc-d2ztr_calico-system(c5a062a0-c220-4591-9e18-d99e0c0cf56c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7d9f85f7fc-d2ztr" podUID="c5a062a0-c220-4591-9e18-d99e0c0cf56c" Jul 15 11:33:39.458799 env[1204]: time="2025-07-15T11:33:39.458753942Z" level=error msg="Failed to destroy network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.459163 env[1204]: time="2025-07-15T11:33:39.459136170Z" level=error msg="encountered an error cleaning up failed sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.459233 env[1204]: time="2025-07-15T11:33:39.459192265Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-95cf67764-44khd,Uid:ad8aa757-a79e-4464-bdcb-025b9e566728,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.459455 kubelet[1945]: E0715 11:33:39.459425 1945 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.459507 kubelet[1945]: E0715 11:33:39.459478 1945 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-95cf67764-44khd" Jul 15 11:33:39.459507 kubelet[1945]: E0715 11:33:39.459500 1945 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-95cf67764-44khd" Jul 15 11:33:39.459561 kubelet[1945]: E0715 11:33:39.459542 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-95cf67764-44khd_calico-apiserver(ad8aa757-a79e-4464-bdcb-025b9e566728)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-95cf67764-44khd_calico-apiserver(ad8aa757-a79e-4464-bdcb-025b9e566728)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-95cf67764-44khd" podUID="ad8aa757-a79e-4464-bdcb-025b9e566728" Jul 15 11:33:39.647793 env[1204]: time="2025-07-15T11:33:39.646816508Z" level=error msg="Failed to destroy network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.647793 env[1204]: time="2025-07-15T11:33:39.647397519Z" level=error msg="encountered an error cleaning up failed sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.647793 env[1204]: time="2025-07-15T11:33:39.647505692Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85f8d685bc-zmqzr,Uid:129c4ac3-7f2d-460d-8ef9-125b67850db7,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.647995 kubelet[1945]: E0715 11:33:39.647849 1945 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.647995 kubelet[1945]: E0715 11:33:39.647907 1945 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-85f8d685bc-zmqzr" Jul 15 11:33:39.647995 kubelet[1945]: E0715 11:33:39.647928 1945 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-85f8d685bc-zmqzr" Jul 15 11:33:39.648097 kubelet[1945]: E0715 11:33:39.647971 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-85f8d685bc-zmqzr_calico-system(129c4ac3-7f2d-460d-8ef9-125b67850db7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-85f8d685bc-zmqzr_calico-system(129c4ac3-7f2d-460d-8ef9-125b67850db7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-85f8d685bc-zmqzr" podUID="129c4ac3-7f2d-460d-8ef9-125b67850db7" Jul 15 11:33:39.653397 env[1204]: time="2025-07-15T11:33:39.653307898Z" level=error msg="Failed to destroy network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.653574 env[1204]: time="2025-07-15T11:33:39.653523523Z" level=error msg="Failed to destroy network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.653777 env[1204]: time="2025-07-15T11:33:39.653741213Z" level=error msg="encountered an error cleaning up failed sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.653842 env[1204]: time="2025-07-15T11:33:39.653800985Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-x72mh,Uid:272bb4b0-cbde-4852-94b1-dcd2390d1612,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.653917 env[1204]: time="2025-07-15T11:33:39.653878861Z" level=error msg="encountered an error cleaning up failed sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.653976 env[1204]: time="2025-07-15T11:33:39.653941829Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f7hlf,Uid:99156ec4-9529-47f6-b199-77d30be5e101,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.654068 kubelet[1945]: E0715 11:33:39.654023 1945 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.654166 kubelet[1945]: E0715 11:33:39.654083 1945 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-x72mh" Jul 15 11:33:39.654166 kubelet[1945]: E0715 11:33:39.654102 1945 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-x72mh" Jul 15 11:33:39.654166 kubelet[1945]: E0715 11:33:39.654135 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-x72mh_kube-system(272bb4b0-cbde-4852-94b1-dcd2390d1612)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-x72mh_kube-system(272bb4b0-cbde-4852-94b1-dcd2390d1612)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-x72mh" podUID="272bb4b0-cbde-4852-94b1-dcd2390d1612" Jul 15 11:33:39.654445 kubelet[1945]: E0715 11:33:39.654412 1945 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.654445 kubelet[1945]: E0715 11:33:39.654442 1945 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-f7hlf" Jul 15 11:33:39.654578 kubelet[1945]: E0715 11:33:39.654457 1945 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-f7hlf" Jul 15 11:33:39.654578 kubelet[1945]: E0715 11:33:39.654481 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-f7hlf_calico-system(99156ec4-9529-47f6-b199-77d30be5e101)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-f7hlf_calico-system(99156ec4-9529-47f6-b199-77d30be5e101)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-f7hlf" podUID="99156ec4-9529-47f6-b199-77d30be5e101" Jul 15 11:33:39.660422 env[1204]: time="2025-07-15T11:33:39.660349422Z" level=error msg="Failed to destroy network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.660694 env[1204]: time="2025-07-15T11:33:39.660658963Z" level=error msg="encountered an error cleaning up failed sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.660737 env[1204]: time="2025-07-15T11:33:39.660706363Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-rphg6,Uid:96cc5b07-a2aa-4209-83e0-b3b0bd5789c1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.660954 kubelet[1945]: E0715 11:33:39.660913 1945 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:39.661011 kubelet[1945]: E0715 11:33:39.660983 1945 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-rphg6" Jul 15 11:33:39.661011 kubelet[1945]: E0715 11:33:39.661006 1945 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-rphg6" Jul 15 11:33:39.661101 kubelet[1945]: E0715 11:33:39.661054 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-rphg6_calico-system(96cc5b07-a2aa-4209-83e0-b3b0bd5789c1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-rphg6_calico-system(96cc5b07-a2aa-4209-83e0-b3b0bd5789c1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-rphg6" podUID="96cc5b07-a2aa-4209-83e0-b3b0bd5789c1" Jul 15 11:33:40.028154 kubelet[1945]: I0715 11:33:40.028065 1945 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:33:40.029162 env[1204]: time="2025-07-15T11:33:40.029121141Z" level=info msg="StopPodSandbox for \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\"" Jul 15 11:33:40.030513 kubelet[1945]: I0715 11:33:40.030461 1945 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:33:40.031197 env[1204]: time="2025-07-15T11:33:40.031133309Z" level=info msg="StopPodSandbox for \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\"" Jul 15 11:33:40.032766 kubelet[1945]: I0715 11:33:40.032637 1945 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:33:40.033215 env[1204]: time="2025-07-15T11:33:40.033174923Z" level=info msg="StopPodSandbox for \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\"" Jul 15 11:33:40.036990 kubelet[1945]: I0715 11:33:40.036944 1945 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:33:40.038474 env[1204]: time="2025-07-15T11:33:40.038451481Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:33:40.038821 kubelet[1945]: I0715 11:33:40.038784 1945 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:33:40.039529 env[1204]: time="2025-07-15T11:33:40.039488247Z" level=info msg="StopPodSandbox for \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\"" Jul 15 11:33:40.039968 env[1204]: time="2025-07-15T11:33:40.039923404Z" level=info msg="StopPodSandbox for \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\"" Jul 15 11:33:40.042574 kubelet[1945]: I0715 11:33:40.042250 1945 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:33:40.042844 env[1204]: time="2025-07-15T11:33:40.042817739Z" level=info msg="StopPodSandbox for \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\"" Jul 15 11:33:40.044786 kubelet[1945]: I0715 11:33:40.044752 1945 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:33:40.045365 env[1204]: time="2025-07-15T11:33:40.045333302Z" level=info msg="StopPodSandbox for \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\"" Jul 15 11:33:40.046725 kubelet[1945]: I0715 11:33:40.046698 1945 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:33:40.047373 env[1204]: time="2025-07-15T11:33:40.047300897Z" level=info msg="StopPodSandbox for \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\"" Jul 15 11:33:40.076386 env[1204]: time="2025-07-15T11:33:40.076325887Z" level=error msg="StopPodSandbox for \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\" failed" error="failed to destroy network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:40.076619 kubelet[1945]: E0715 11:33:40.076582 1945 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:33:40.076700 kubelet[1945]: E0715 11:33:40.076651 1945 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55"} Jul 15 11:33:40.076727 kubelet[1945]: E0715 11:33:40.076713 1945 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6afb2d3f-5c1b-46b4-b75e-d452cc71537d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:40.076791 kubelet[1945]: E0715 11:33:40.076742 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6afb2d3f-5c1b-46b4-b75e-d452cc71537d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-vzxgn" podUID="6afb2d3f-5c1b-46b4-b75e-d452cc71537d" Jul 15 11:33:40.079587 env[1204]: time="2025-07-15T11:33:40.079520797Z" level=error msg="StopPodSandbox for \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\" failed" error="failed to destroy network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:40.079799 kubelet[1945]: E0715 11:33:40.079764 1945 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:33:40.079861 kubelet[1945]: E0715 11:33:40.079805 1945 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c"} Jul 15 11:33:40.079861 kubelet[1945]: E0715 11:33:40.079826 1945 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"272bb4b0-cbde-4852-94b1-dcd2390d1612\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:40.079861 kubelet[1945]: E0715 11:33:40.079848 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"272bb4b0-cbde-4852-94b1-dcd2390d1612\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-x72mh" podUID="272bb4b0-cbde-4852-94b1-dcd2390d1612" Jul 15 11:33:40.093411 env[1204]: time="2025-07-15T11:33:40.093360825Z" level=error msg="StopPodSandbox for \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\" failed" error="failed to destroy network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:40.093702 kubelet[1945]: E0715 11:33:40.093641 1945 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:33:40.093780 kubelet[1945]: E0715 11:33:40.093721 1945 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3"} Jul 15 11:33:40.093807 kubelet[1945]: E0715 11:33:40.093770 1945 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:40.093870 kubelet[1945]: E0715 11:33:40.093821 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-rphg6" podUID="96cc5b07-a2aa-4209-83e0-b3b0bd5789c1" Jul 15 11:33:40.094428 env[1204]: time="2025-07-15T11:33:40.094370781Z" level=error msg="StopPodSandbox for \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\" failed" error="failed to destroy network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:40.094685 kubelet[1945]: E0715 11:33:40.094636 1945 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:33:40.094741 kubelet[1945]: E0715 11:33:40.094700 1945 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47"} Jul 15 11:33:40.094741 kubelet[1945]: E0715 11:33:40.094734 1945 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ad8aa757-a79e-4464-bdcb-025b9e566728\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:40.094813 kubelet[1945]: E0715 11:33:40.094758 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ad8aa757-a79e-4464-bdcb-025b9e566728\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-95cf67764-44khd" podUID="ad8aa757-a79e-4464-bdcb-025b9e566728" Jul 15 11:33:40.111998 env[1204]: time="2025-07-15T11:33:40.111935282Z" level=error msg="StopPodSandbox for \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\" failed" error="failed to destroy network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:40.112467 kubelet[1945]: E0715 11:33:40.112415 1945 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:33:40.112534 kubelet[1945]: E0715 11:33:40.112480 1945 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9"} Jul 15 11:33:40.112534 kubelet[1945]: E0715 11:33:40.112514 1945 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"99156ec4-9529-47f6-b199-77d30be5e101\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:40.112621 kubelet[1945]: E0715 11:33:40.112536 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"99156ec4-9529-47f6-b199-77d30be5e101\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-f7hlf" podUID="99156ec4-9529-47f6-b199-77d30be5e101" Jul 15 11:33:40.118543 env[1204]: time="2025-07-15T11:33:40.118481804Z" level=error msg="StopPodSandbox for \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\" failed" error="failed to destroy network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:40.119003 kubelet[1945]: E0715 11:33:40.118836 1945 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:33:40.119003 kubelet[1945]: E0715 11:33:40.118893 1945 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d"} Jul 15 11:33:40.119003 kubelet[1945]: E0715 11:33:40.118935 1945 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3bc095c7-aa20-4cd8-bd19-7dafcdd859ff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:40.119003 kubelet[1945]: E0715 11:33:40.118958 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3bc095c7-aa20-4cd8-bd19-7dafcdd859ff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-95cf67764-w725p" podUID="3bc095c7-aa20-4cd8-bd19-7dafcdd859ff" Jul 15 11:33:40.119361 env[1204]: time="2025-07-15T11:33:40.119316933Z" level=error msg="StopPodSandbox for \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\" failed" error="failed to destroy network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:40.119641 env[1204]: time="2025-07-15T11:33:40.119589784Z" level=error msg="StopPodSandbox for \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\" failed" error="failed to destroy network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:33:40.119695 kubelet[1945]: E0715 11:33:40.119630 1945 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:33:40.119695 kubelet[1945]: E0715 11:33:40.119659 1945 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d"} Jul 15 11:33:40.119695 kubelet[1945]: E0715 11:33:40.119679 1945 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"129c4ac3-7f2d-460d-8ef9-125b67850db7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:40.119830 kubelet[1945]: E0715 11:33:40.119696 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"129c4ac3-7f2d-460d-8ef9-125b67850db7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-85f8d685bc-zmqzr" podUID="129c4ac3-7f2d-460d-8ef9-125b67850db7" Jul 15 11:33:40.119830 kubelet[1945]: E0715 11:33:40.119800 1945 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:33:40.119901 kubelet[1945]: E0715 11:33:40.119855 1945 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b"} Jul 15 11:33:40.119901 kubelet[1945]: E0715 11:33:40.119892 1945 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:33:40.119966 kubelet[1945]: E0715 11:33:40.119917 1945 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7d9f85f7fc-d2ztr" podUID="c5a062a0-c220-4591-9e18-d99e0c0cf56c" Jul 15 11:33:43.352080 kubelet[1945]: I0715 11:33:43.352025 1945 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:33:43.352615 kubelet[1945]: E0715 11:33:43.352414 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:43.385000 audit[3107]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3107 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:43.390296 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 15 11:33:43.390382 kernel: audit: type=1325 audit(1752579223.385:985): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3107 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:43.390412 kernel: audit: type=1300 audit(1752579223.385:985): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff9d439530 a2=0 a3=7fff9d43951c items=0 ppid=2067 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:43.385000 audit[3107]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff9d439530 a2=0 a3=7fff9d43951c items=0 ppid=2067 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:43.385000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:43.397089 kernel: audit: type=1327 audit(1752579223.385:985): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:43.397000 audit[3107]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:43.397000 audit[3107]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff9d439530 a2=0 a3=7fff9d43951c items=0 ppid=2067 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:43.406585 kernel: audit: type=1325 audit(1752579223.397:986): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:43.406678 kernel: audit: type=1300 audit(1752579223.397:986): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff9d439530 a2=0 a3=7fff9d43951c items=0 ppid=2067 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:43.406710 kernel: audit: type=1327 audit(1752579223.397:986): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:43.397000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:44.054572 kubelet[1945]: E0715 11:33:44.054524 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:45.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.90:22-10.0.0.1:60762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:45.694693 systemd[1]: Started sshd@7-10.0.0.90:22-10.0.0.1:60762.service. Jul 15 11:33:45.700269 kernel: audit: type=1130 audit(1752579225.693:987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.90:22-10.0.0.1:60762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:45.728267 sshd[3111]: Accepted publickey for core from 10.0.0.1 port 60762 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:45.727000 audit[3111]: USER_ACCT pid=3111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:45.731000 audit[3111]: CRED_ACQ pid=3111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:45.733337 sshd[3111]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:45.737536 kernel: audit: type=1101 audit(1752579225.727:988): pid=3111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:45.737599 kernel: audit: type=1103 audit(1752579225.731:989): pid=3111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:45.737622 kernel: audit: type=1006 audit(1752579225.731:990): pid=3111 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 15 11:33:45.739511 systemd[1]: Started session-8.scope. Jul 15 11:33:45.731000 audit[3111]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff10622210 a2=3 a3=0 items=0 ppid=1 pid=3111 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:45.731000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:45.740240 systemd-logind[1197]: New session 8 of user core. Jul 15 11:33:45.743000 audit[3111]: USER_START pid=3111 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:45.745000 audit[3113]: CRED_ACQ pid=3113 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:45.891523 sshd[3111]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:45.891000 audit[3111]: USER_END pid=3111 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:45.891000 audit[3111]: CRED_DISP pid=3111 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:45.894116 systemd[1]: sshd@7-10.0.0.90:22-10.0.0.1:60762.service: Deactivated successfully. Jul 15 11:33:45.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.90:22-10.0.0.1:60762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:45.895029 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:33:45.895671 systemd-logind[1197]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:33:45.896927 systemd-logind[1197]: Removed session 8. Jul 15 11:33:46.137877 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3943814219.mount: Deactivated successfully. Jul 15 11:33:47.841715 env[1204]: time="2025-07-15T11:33:47.841645392Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:47.845049 env[1204]: time="2025-07-15T11:33:47.844984018Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:47.846915 env[1204]: time="2025-07-15T11:33:47.846877541Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:47.848370 env[1204]: time="2025-07-15T11:33:47.848341248Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:47.848711 env[1204]: time="2025-07-15T11:33:47.848673140Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 15 11:33:47.859304 env[1204]: time="2025-07-15T11:33:47.859249558Z" level=info msg="CreateContainer within sandbox \"54f60c7968236298daa1ab01dee35dce219074b9babcd876a2eb5339574cc0fa\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:33:47.876634 env[1204]: time="2025-07-15T11:33:47.876590170Z" level=info msg="CreateContainer within sandbox \"54f60c7968236298daa1ab01dee35dce219074b9babcd876a2eb5339574cc0fa\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"4a927a25ff06137b8abf810916500384184232e12d80e80f676704d4e87213d4\"" Jul 15 11:33:47.877228 env[1204]: time="2025-07-15T11:33:47.877198461Z" level=info msg="StartContainer for \"4a927a25ff06137b8abf810916500384184232e12d80e80f676704d4e87213d4\"" Jul 15 11:33:47.891266 systemd[1]: Started cri-containerd-4a927a25ff06137b8abf810916500384184232e12d80e80f676704d4e87213d4.scope. Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f9f9fdb4a18 items=0 ppid=2445 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:47.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461393237613235666630363133376238616266383130393136353030 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit: BPF prog-id=136 op=LOAD Jul 15 11:33:47.904000 audit[3139]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000dfba8 items=0 ppid=2445 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:47.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461393237613235666630363133376238616266383130393136353030 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit: BPF prog-id=137 op=LOAD Jul 15 11:33:47.904000 audit[3139]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000dfbf8 items=0 ppid=2445 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:47.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461393237613235666630363133376238616266383130393136353030 Jul 15 11:33:47.904000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:33:47.904000 audit: BPF prog-id=136 op=UNLOAD Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { perfmon } for pid=3139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit[3139]: AVC avc: denied { bpf } for pid=3139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:47.904000 audit: BPF prog-id=138 op=LOAD Jul 15 11:33:47.904000 audit[3139]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000dfc88 items=0 ppid=2445 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:47.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461393237613235666630363133376238616266383130393136353030 Jul 15 11:33:47.983527 env[1204]: time="2025-07-15T11:33:47.983467405Z" level=info msg="StartContainer for \"4a927a25ff06137b8abf810916500384184232e12d80e80f676704d4e87213d4\" returns successfully" Jul 15 11:33:48.008950 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:33:48.009115 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:33:48.083130 kubelet[1945]: I0715 11:33:48.082491 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-dzjvb" podStartSLOduration=1.252529292 podStartE2EDuration="21.082467148s" podCreationTimestamp="2025-07-15 11:33:27 +0000 UTC" firstStartedPulling="2025-07-15 11:33:28.019530858 +0000 UTC m=+19.739507767" lastFinishedPulling="2025-07-15 11:33:47.849468714 +0000 UTC m=+39.569445623" observedRunningTime="2025-07-15 11:33:48.08228155 +0000 UTC m=+39.802258479" watchObservedRunningTime="2025-07-15 11:33:48.082467148 +0000 UTC m=+39.802444057" Jul 15 11:33:48.112767 env[1204]: time="2025-07-15T11:33:48.112667869Z" level=info msg="StopPodSandbox for \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\"" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.181 [INFO][3219] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.181 [INFO][3219] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" iface="eth0" netns="/var/run/netns/cni-373d2dc1-b570-04a4-d8a2-051c32160f2f" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.182 [INFO][3219] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" iface="eth0" netns="/var/run/netns/cni-373d2dc1-b570-04a4-d8a2-051c32160f2f" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.182 [INFO][3219] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" iface="eth0" netns="/var/run/netns/cni-373d2dc1-b570-04a4-d8a2-051c32160f2f" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.182 [INFO][3219] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.182 [INFO][3219] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.244 [INFO][3228] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" HandleID="k8s-pod-network.b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Workload="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.245 [INFO][3228] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.245 [INFO][3228] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.251 [WARNING][3228] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" HandleID="k8s-pod-network.b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Workload="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.251 [INFO][3228] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" HandleID="k8s-pod-network.b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Workload="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.252 [INFO][3228] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:48.255560 env[1204]: 2025-07-15 11:33:48.253 [INFO][3219] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:33:48.255999 env[1204]: time="2025-07-15T11:33:48.255735471Z" level=info msg="TearDown network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\" successfully" Jul 15 11:33:48.255999 env[1204]: time="2025-07-15T11:33:48.255783712Z" level=info msg="StopPodSandbox for \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\" returns successfully" Jul 15 11:33:48.306209 kubelet[1945]: I0715 11:33:48.306155 1945 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c5a062a0-c220-4591-9e18-d99e0c0cf56c-whisker-backend-key-pair\") pod \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\" (UID: \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\") " Jul 15 11:33:48.306209 kubelet[1945]: I0715 11:33:48.306208 1945 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c5a062a0-c220-4591-9e18-d99e0c0cf56c-whisker-ca-bundle\") pod \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\" (UID: \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\") " Jul 15 11:33:48.306411 kubelet[1945]: I0715 11:33:48.306236 1945 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-sbpd8\" (UniqueName: \"kubernetes.io/projected/c5a062a0-c220-4591-9e18-d99e0c0cf56c-kube-api-access-sbpd8\") pod \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\" (UID: \"c5a062a0-c220-4591-9e18-d99e0c0cf56c\") " Jul 15 11:33:48.306937 kubelet[1945]: I0715 11:33:48.306832 1945 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c5a062a0-c220-4591-9e18-d99e0c0cf56c-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "c5a062a0-c220-4591-9e18-d99e0c0cf56c" (UID: "c5a062a0-c220-4591-9e18-d99e0c0cf56c"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 15 11:33:48.309231 kubelet[1945]: I0715 11:33:48.309194 1945 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c5a062a0-c220-4591-9e18-d99e0c0cf56c-kube-api-access-sbpd8" (OuterVolumeSpecName: "kube-api-access-sbpd8") pod "c5a062a0-c220-4591-9e18-d99e0c0cf56c" (UID: "c5a062a0-c220-4591-9e18-d99e0c0cf56c"). InnerVolumeSpecName "kube-api-access-sbpd8". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 15 11:33:48.309463 kubelet[1945]: I0715 11:33:48.309440 1945 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c5a062a0-c220-4591-9e18-d99e0c0cf56c-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "c5a062a0-c220-4591-9e18-d99e0c0cf56c" (UID: "c5a062a0-c220-4591-9e18-d99e0c0cf56c"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 15 11:33:48.376344 systemd[1]: Removed slice kubepods-besteffort-podc5a062a0_c220_4591_9e18_d99e0c0cf56c.slice. Jul 15 11:33:48.407474 kubelet[1945]: I0715 11:33:48.407410 1945 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c5a062a0-c220-4591-9e18-d99e0c0cf56c-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:33:48.407474 kubelet[1945]: I0715 11:33:48.407448 1945 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c5a062a0-c220-4591-9e18-d99e0c0cf56c-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:33:48.407474 kubelet[1945]: I0715 11:33:48.407456 1945 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-sbpd8\" (UniqueName: \"kubernetes.io/projected/c5a062a0-c220-4591-9e18-d99e0c0cf56c-kube-api-access-sbpd8\") on node \"localhost\" DevicePath \"\"" Jul 15 11:33:48.854356 systemd[1]: run-netns-cni\x2d373d2dc1\x2db570\x2d04a4\x2dd8a2\x2d051c32160f2f.mount: Deactivated successfully. Jul 15 11:33:48.854450 systemd[1]: var-lib-kubelet-pods-c5a062a0\x2dc220\x2d4591\x2d9e18\x2dd99e0c0cf56c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dsbpd8.mount: Deactivated successfully. Jul 15 11:33:48.854508 systemd[1]: var-lib-kubelet-pods-c5a062a0\x2dc220\x2d4591\x2d9e18\x2dd99e0c0cf56c-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:33:49.111789 kubelet[1945]: I0715 11:33:49.111639 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/71e0b7c7-6feb-4068-815d-4ae6fa28cf82-whisker-backend-key-pair\") pod \"whisker-5c559b9b7f-smw4n\" (UID: \"71e0b7c7-6feb-4068-815d-4ae6fa28cf82\") " pod="calico-system/whisker-5c559b9b7f-smw4n" Jul 15 11:33:49.114045 systemd[1]: Created slice kubepods-besteffort-pod71e0b7c7_6feb_4068_815d_4ae6fa28cf82.slice. Jul 15 11:33:49.115069 kubelet[1945]: I0715 11:33:49.115046 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7tqkm\" (UniqueName: \"kubernetes.io/projected/71e0b7c7-6feb-4068-815d-4ae6fa28cf82-kube-api-access-7tqkm\") pod \"whisker-5c559b9b7f-smw4n\" (UID: \"71e0b7c7-6feb-4068-815d-4ae6fa28cf82\") " pod="calico-system/whisker-5c559b9b7f-smw4n" Jul 15 11:33:49.115220 kubelet[1945]: I0715 11:33:49.115199 1945 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/71e0b7c7-6feb-4068-815d-4ae6fa28cf82-whisker-ca-bundle\") pod \"whisker-5c559b9b7f-smw4n\" (UID: \"71e0b7c7-6feb-4068-815d-4ae6fa28cf82\") " pod="calico-system/whisker-5c559b9b7f-smw4n" Jul 15 11:33:49.272387 kernel: kauditd_printk_skb: 50 callbacks suppressed Jul 15 11:33:49.272510 kernel: audit: type=1400 audit(1752579229.268:1002): avc: denied { write } for pid=3325 comm="tee" name="fd" dev="proc" ino=24285 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:49.268000 audit[3325]: AVC avc: denied { write } for pid=3325 comm="tee" name="fd" dev="proc" ino=24285 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:49.268000 audit[3325]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe76bbc7da a2=241 a3=1b6 items=1 ppid=3280 pid=3325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.278487 kernel: audit: type=1300 audit(1752579229.268:1002): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe76bbc7da a2=241 a3=1b6 items=1 ppid=3280 pid=3325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.268000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:33:49.280060 kernel: audit: type=1307 audit(1752579229.268:1002): cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:33:49.280105 kernel: audit: type=1302 audit(1752579229.268:1002): item=0 name="/dev/fd/63" inode=24282 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:49.268000 audit: PATH item=0 name="/dev/fd/63" inode=24282 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:49.268000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:49.292221 kernel: audit: type=1327 audit(1752579229.268:1002): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:49.271000 audit[3323]: AVC avc: denied { write } for pid=3323 comm="tee" name="fd" dev="proc" ino=23542 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:49.304166 kernel: audit: type=1400 audit(1752579229.271:1003): avc: denied { write } for pid=3323 comm="tee" name="fd" dev="proc" ino=23542 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:49.304251 kernel: audit: type=1300 audit(1752579229.271:1003): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd4b9ea7d9 a2=241 a3=1b6 items=1 ppid=3289 pid=3323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.271000 audit[3323]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd4b9ea7d9 a2=241 a3=1b6 items=1 ppid=3289 pid=3323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.271000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:33:49.309060 kernel: audit: type=1307 audit(1752579229.271:1003): cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:33:49.309091 kernel: audit: type=1302 audit(1752579229.271:1003): item=0 name="/dev/fd/63" inode=25678 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:49.271000 audit: PATH item=0 name="/dev/fd/63" inode=25678 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:49.312011 kernel: audit: type=1327 audit(1752579229.271:1003): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:49.271000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:49.291000 audit[3327]: AVC avc: denied { write } for pid=3327 comm="tee" name="fd" dev="proc" ino=25052 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:49.291000 audit[3327]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd0c0357ea a2=241 a3=1b6 items=1 ppid=3285 pid=3327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.291000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:33:49.291000 audit: PATH item=0 name="/dev/fd/63" inode=25679 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:49.291000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:49.310000 audit[3349]: AVC avc: denied { write } for pid=3349 comm="tee" name="fd" dev="proc" ino=25060 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:49.310000 audit[3349]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffca1c307e9 a2=241 a3=1b6 items=1 ppid=3282 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.310000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:33:49.310000 audit: PATH item=0 name="/dev/fd/63" inode=25049 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:49.310000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:49.313000 audit[3342]: AVC avc: denied { write } for pid=3342 comm="tee" name="fd" dev="proc" ino=25685 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:49.313000 audit[3342]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe683527e9 a2=241 a3=1b6 items=1 ppid=3287 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.313000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:33:49.313000 audit: PATH item=0 name="/dev/fd/63" inode=25047 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:49.313000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:49.318000 audit[3354]: AVC avc: denied { write } for pid=3354 comm="tee" name="fd" dev="proc" ino=25069 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:49.318000 audit[3354]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff5f7cd7e9 a2=241 a3=1b6 items=1 ppid=3284 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.318000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:33:49.318000 audit: PATH item=0 name="/dev/fd/63" inode=23545 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:49.318000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:49.320000 audit[3361]: AVC avc: denied { write } for pid=3361 comm="tee" name="fd" dev="proc" ino=25073 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:33:49.320000 audit[3361]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd8101c7eb a2=241 a3=1b6 items=1 ppid=3298 pid=3361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.320000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:33:49.320000 audit: PATH item=0 name="/dev/fd/63" inode=25064 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:33:49.320000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:33:49.417104 env[1204]: time="2025-07-15T11:33:49.416739681Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c559b9b7f-smw4n,Uid:71e0b7c7-6feb-4068-815d-4ae6fa28cf82,Namespace:calico-system,Attempt:0,}" Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit: BPF prog-id=139 op=LOAD Jul 15 11:33:49.419000 audit[3397]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe184a81c0 a2=98 a3=1fffffffffffffff items=0 ppid=3283 pid=3397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.419000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:33:49.419000 audit: BPF prog-id=139 op=UNLOAD Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit: BPF prog-id=140 op=LOAD Jul 15 11:33:49.419000 audit[3397]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe184a80a0 a2=94 a3=3 items=0 ppid=3283 pid=3397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.419000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:33:49.419000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { bpf } for pid=3397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit: BPF prog-id=141 op=LOAD Jul 15 11:33:49.419000 audit[3397]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe184a80e0 a2=94 a3=7ffe184a82c0 items=0 ppid=3283 pid=3397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.419000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:33:49.419000 audit: BPF prog-id=141 op=UNLOAD Jul 15 11:33:49.419000 audit[3397]: AVC avc: denied { perfmon } for pid=3397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.419000 audit[3397]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe184a81b0 a2=50 a3=a000000085 items=0 ppid=3283 pid=3397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.419000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit: BPF prog-id=142 op=LOAD Jul 15 11:33:49.421000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc909c2d10 a2=98 a3=3 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.421000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.421000 audit: BPF prog-id=142 op=UNLOAD Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit: BPF prog-id=143 op=LOAD Jul 15 11:33:49.421000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc909c2b00 a2=94 a3=54428f items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.421000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.421000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.421000 audit: BPF prog-id=144 op=LOAD Jul 15 11:33:49.421000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc909c2b30 a2=94 a3=2 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.421000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.421000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit: BPF prog-id=145 op=LOAD Jul 15 11:33:49.525000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc909c29f0 a2=94 a3=1 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.525000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.525000 audit: BPF prog-id=145 op=UNLOAD Jul 15 11:33:49.525000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.525000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc909c2ac0 a2=50 a3=7ffc909c2ba0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.525000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.531491 systemd-networkd[1025]: calie92fafe0543: Link UP Jul 15 11:33:49.534115 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:33:49.534166 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie92fafe0543: link becomes ready Jul 15 11:33:49.534152 systemd-networkd[1025]: calie92fafe0543: Gained carrier Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc909c2a00 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc909c2a30 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc909c2940 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc909c2a50 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc909c2a30 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc909c2a20 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc909c2a50 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc909c2a30 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc909c2a50 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc909c2a20 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc909c2a90 a2=28 a3=0 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc909c2840 a2=50 a3=1 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit: BPF prog-id=146 op=LOAD Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc909c2840 a2=94 a3=5 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit: BPF prog-id=146 op=UNLOAD Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc909c28f0 a2=50 a3=1 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc909c2a10 a2=4 a3=38 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.534000 audit[3398]: AVC avc: denied { confidentiality } for pid=3398 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:49.534000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc909c2a60 a2=94 a3=6 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.534000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { confidentiality } for pid=3398 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:49.535000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc909c2210 a2=94 a3=88 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.535000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.535000 audit[3398]: AVC avc: denied { confidentiality } for pid=3398 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:49.535000 audit[3398]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc909c2210 a2=94 a3=88 items=0 ppid=3283 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.535000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.468 [INFO][3399] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--5c559b9b7f--smw4n-eth0 whisker-5c559b9b7f- calico-system 71e0b7c7-6feb-4068-815d-4ae6fa28cf82 962 0 2025-07-15 11:33:49 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5c559b9b7f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-5c559b9b7f-smw4n eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calie92fafe0543 [] [] }} ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Namespace="calico-system" Pod="whisker-5c559b9b7f-smw4n" WorkloadEndpoint="localhost-k8s-whisker--5c559b9b7f--smw4n-" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.469 [INFO][3399] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Namespace="calico-system" Pod="whisker-5c559b9b7f-smw4n" WorkloadEndpoint="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.493 [INFO][3415] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" HandleID="k8s-pod-network.a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Workload="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.494 [INFO][3415] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" HandleID="k8s-pod-network.a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Workload="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00059e5f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-5c559b9b7f-smw4n", "timestamp":"2025-07-15 11:33:49.493886496 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.494 [INFO][3415] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.494 [INFO][3415] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.494 [INFO][3415] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.499 [INFO][3415] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" host="localhost" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.504 [INFO][3415] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.508 [INFO][3415] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.510 [INFO][3415] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.512 [INFO][3415] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.512 [INFO][3415] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" host="localhost" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.513 [INFO][3415] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963 Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.517 [INFO][3415] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" host="localhost" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.521 [INFO][3415] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" host="localhost" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.521 [INFO][3415] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" host="localhost" Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.521 [INFO][3415] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:49.546826 env[1204]: 2025-07-15 11:33:49.521 [INFO][3415] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" HandleID="k8s-pod-network.a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Workload="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" Jul 15 11:33:49.545000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.545000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.545000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.545000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.545000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.545000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.545000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.545000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.545000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.545000 audit: BPF prog-id=147 op=LOAD Jul 15 11:33:49.545000 audit[3427]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb9330e90 a2=98 a3=1999999999999999 items=0 ppid=3283 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.545000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:33:49.546000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit: BPF prog-id=148 op=LOAD Jul 15 11:33:49.546000 audit[3427]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb9330d70 a2=94 a3=ffff items=0 ppid=3283 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.546000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:33:49.546000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.546000 audit: BPF prog-id=149 op=LOAD Jul 15 11:33:49.546000 audit[3427]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb9330db0 a2=94 a3=7ffeb9330f90 items=0 ppid=3283 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.546000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:33:49.546000 audit: BPF prog-id=149 op=UNLOAD Jul 15 11:33:49.548793 env[1204]: 2025-07-15 11:33:49.524 [INFO][3399] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Namespace="calico-system" Pod="whisker-5c559b9b7f-smw4n" WorkloadEndpoint="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5c559b9b7f--smw4n-eth0", GenerateName:"whisker-5c559b9b7f-", Namespace:"calico-system", SelfLink:"", UID:"71e0b7c7-6feb-4068-815d-4ae6fa28cf82", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5c559b9b7f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-5c559b9b7f-smw4n", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie92fafe0543", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:49.548793 env[1204]: 2025-07-15 11:33:49.524 [INFO][3399] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Namespace="calico-system" Pod="whisker-5c559b9b7f-smw4n" WorkloadEndpoint="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" Jul 15 11:33:49.548793 env[1204]: 2025-07-15 11:33:49.524 [INFO][3399] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie92fafe0543 ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Namespace="calico-system" Pod="whisker-5c559b9b7f-smw4n" WorkloadEndpoint="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" Jul 15 11:33:49.548793 env[1204]: 2025-07-15 11:33:49.534 [INFO][3399] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Namespace="calico-system" Pod="whisker-5c559b9b7f-smw4n" WorkloadEndpoint="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" Jul 15 11:33:49.548793 env[1204]: 2025-07-15 11:33:49.535 [INFO][3399] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Namespace="calico-system" Pod="whisker-5c559b9b7f-smw4n" WorkloadEndpoint="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5c559b9b7f--smw4n-eth0", GenerateName:"whisker-5c559b9b7f-", Namespace:"calico-system", SelfLink:"", UID:"71e0b7c7-6feb-4068-815d-4ae6fa28cf82", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5c559b9b7f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963", Pod:"whisker-5c559b9b7f-smw4n", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie92fafe0543", MAC:"fe:ff:32:0c:b8:85", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:49.548793 env[1204]: 2025-07-15 11:33:49.544 [INFO][3399] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963" Namespace="calico-system" Pod="whisker-5c559b9b7f-smw4n" WorkloadEndpoint="localhost-k8s-whisker--5c559b9b7f--smw4n-eth0" Jul 15 11:33:49.556630 env[1204]: time="2025-07-15T11:33:49.556562359Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:49.556630 env[1204]: time="2025-07-15T11:33:49.556606602Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:49.556630 env[1204]: time="2025-07-15T11:33:49.556617061Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:49.557007 env[1204]: time="2025-07-15T11:33:49.556884252Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963 pid=3451 runtime=io.containerd.runc.v2 Jul 15 11:33:49.574307 systemd[1]: Started cri-containerd-a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963.scope. Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.587000 audit: BPF prog-id=150 op=LOAD Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133633238303066393064356230626333333461353836313463626333 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133633238303066393064356230626333333461353836313463626333 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit: BPF prog-id=151 op=LOAD Jul 15 11:33:49.589000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000210f80 items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133633238303066393064356230626333333461353836313463626333 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit: BPF prog-id=152 op=LOAD Jul 15 11:33:49.589000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000210fc8 items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133633238303066393064356230626333333461353836313463626333 Jul 15 11:33:49.589000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:33:49.589000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.589000 audit: BPF prog-id=153 op=LOAD Jul 15 11:33:49.589000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002113d8 items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133633238303066393064356230626333333461353836313463626333 Jul 15 11:33:49.595045 systemd-resolved[1150]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:49.604153 systemd-networkd[1025]: vxlan.calico: Link UP Jul 15 11:33:49.604161 systemd-networkd[1025]: vxlan.calico: Gained carrier Jul 15 11:33:49.623461 env[1204]: time="2025-07-15T11:33:49.623410390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c559b9b7f-smw4n,Uid:71e0b7c7-6feb-4068-815d-4ae6fa28cf82,Namespace:calico-system,Attempt:0,} returns sandbox id \"a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963\"" Jul 15 11:33:49.625220 env[1204]: time="2025-07-15T11:33:49.625174029Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:33:49.630000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.630000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.630000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.630000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.630000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.630000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.630000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.630000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.630000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.630000 audit: BPF prog-id=154 op=LOAD Jul 15 11:33:49.630000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe2c5c37d0 a2=98 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.630000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.630000 audit: BPF prog-id=154 op=UNLOAD Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit: BPF prog-id=155 op=LOAD Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe2c5c35e0 a2=94 a3=54428f items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit: BPF prog-id=156 op=LOAD Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe2c5c3610 a2=94 a3=2 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit: BPF prog-id=156 op=UNLOAD Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2c5c34e0 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2c5c3510 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2c5c3420 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2c5c3530 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2c5c3510 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2c5c3500 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2c5c3530 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2c5c3510 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2c5c3530 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2c5c3500 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2c5c3570 a2=28 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.631000 audit: BPF prog-id=157 op=LOAD Jul 15 11:33:49.631000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe2c5c33e0 a2=94 a3=0 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.631000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.632000 audit: BPF prog-id=157 op=UNLOAD Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffe2c5c33d0 a2=50 a3=2800 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.632000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffe2c5c33d0 a2=50 a3=2800 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.632000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit: BPF prog-id=158 op=LOAD Jul 15 11:33:49.632000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe2c5c2bf0 a2=94 a3=2 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.632000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.632000 audit: BPF prog-id=158 op=UNLOAD Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.632000 audit: BPF prog-id=159 op=LOAD Jul 15 11:33:49.632000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe2c5c2cf0 a2=94 a3=30 items=0 ppid=3283 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.632000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:33:49.640000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.640000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.640000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.640000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.640000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.640000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.640000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.640000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.640000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.640000 audit: BPF prog-id=160 op=LOAD Jul 15 11:33:49.640000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe4164aa60 a2=98 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.640000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.641000 audit: BPF prog-id=160 op=UNLOAD Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit: BPF prog-id=161 op=LOAD Jul 15 11:33:49.641000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe4164a850 a2=94 a3=54428f items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.641000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.641000 audit: BPF prog-id=161 op=UNLOAD Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.641000 audit: BPF prog-id=162 op=LOAD Jul 15 11:33:49.641000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe4164a880 a2=94 a3=2 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.641000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.641000 audit: BPF prog-id=162 op=UNLOAD Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit: BPF prog-id=163 op=LOAD Jul 15 11:33:49.744000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe4164a740 a2=94 a3=1 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.744000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.744000 audit: BPF prog-id=163 op=UNLOAD Jul 15 11:33:49.744000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.744000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe4164a810 a2=50 a3=7ffe4164a8f0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.744000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4164a750 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4164a780 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4164a690 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4164a7a0 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4164a780 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4164a770 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4164a7a0 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4164a780 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4164a7a0 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4164a770 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4164a7e0 a2=28 a3=0 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe4164a590 a2=50 a3=1 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit: BPF prog-id=164 op=LOAD Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe4164a590 a2=94 a3=5 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit: BPF prog-id=164 op=UNLOAD Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe4164a640 a2=50 a3=1 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe4164a760 a2=4 a3=38 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.753000 audit[3510]: AVC avc: denied { confidentiality } for pid=3510 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:49.753000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe4164a7b0 a2=94 a3=6 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.753000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { confidentiality } for pid=3510 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:49.754000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe41649f60 a2=94 a3=88 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.754000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { confidentiality } for pid=3510 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:33:49.754000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe41649f60 a2=94 a3=88 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.754000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe4164b990 a2=10 a3=208 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.754000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe4164b830 a2=10 a3=3 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.754000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe4164b7d0 a2=10 a3=3 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.754000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.754000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:49.754000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe4164b7d0 a2=10 a3=7 items=0 ppid=3283 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.754000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:33:49.762000 audit: BPF prog-id=159 op=UNLOAD Jul 15 11:33:49.806000 audit[3532]: NETFILTER_CFG table=nat:101 family=2 entries=15 op=nft_register_chain pid=3532 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:49.806000 audit[3532]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffe175efc40 a2=0 a3=7ffe175efc2c items=0 ppid=3283 pid=3532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.806000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:49.807000 audit[3537]: NETFILTER_CFG table=mangle:102 family=2 entries=16 op=nft_register_chain pid=3537 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:49.807000 audit[3537]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff51c6b290 a2=0 a3=7fff51c6b27c items=0 ppid=3283 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.807000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:49.809000 audit[3533]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3533 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:49.809000 audit[3533]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffddef68790 a2=0 a3=7ffddef6877c items=0 ppid=3283 pid=3533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.809000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:49.811000 audit[3534]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3534 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:49.811000 audit[3534]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7fff396a3670 a2=0 a3=7fff396a365c items=0 ppid=3283 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:49.811000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:50.373413 kubelet[1945]: I0715 11:33:50.373371 1945 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="c5a062a0-c220-4591-9e18-d99e0c0cf56c" path="/var/lib/kubelet/pods/c5a062a0-c220-4591-9e18-d99e0c0cf56c/volumes" Jul 15 11:33:50.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.90:22-10.0.0.1:43568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:50.896141 systemd[1]: Started sshd@8-10.0.0.90:22-10.0.0.1:43568.service. Jul 15 11:33:50.926000 audit[3549]: USER_ACCT pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.928375 sshd[3549]: Accepted publickey for core from 10.0.0.1 port 43568 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:50.927000 audit[3549]: CRED_ACQ pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.927000 audit[3549]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf317e0a0 a2=3 a3=0 items=0 ppid=1 pid=3549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:50.927000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:50.929302 sshd[3549]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:50.932698 systemd-logind[1197]: New session 9 of user core. Jul 15 11:33:50.933496 systemd[1]: Started session-9.scope. Jul 15 11:33:50.935000 audit[3549]: USER_START pid=3549 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.936000 audit[3551]: CRED_ACQ pid=3551 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:50.946296 env[1204]: time="2025-07-15T11:33:50.946262085Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:50.948288 env[1204]: time="2025-07-15T11:33:50.948249965Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:50.949582 env[1204]: time="2025-07-15T11:33:50.949541127Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:50.951022 env[1204]: time="2025-07-15T11:33:50.950988873Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:50.951473 env[1204]: time="2025-07-15T11:33:50.951448496Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 15 11:33:50.953537 env[1204]: time="2025-07-15T11:33:50.953492311Z" level=info msg="CreateContainer within sandbox \"a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:33:50.967140 env[1204]: time="2025-07-15T11:33:50.967090284Z" level=info msg="CreateContainer within sandbox \"a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"591fccc57a34fa8448f064e4530865f9348ee5b4d0891db001ab329eef0e1419\"" Jul 15 11:33:50.967563 env[1204]: time="2025-07-15T11:33:50.967523897Z" level=info msg="StartContainer for \"591fccc57a34fa8448f064e4530865f9348ee5b4d0891db001ab329eef0e1419\"" Jul 15 11:33:50.990298 systemd[1]: Started cri-containerd-591fccc57a34fa8448f064e4530865f9348ee5b4d0891db001ab329eef0e1419.scope. Jul 15 11:33:51.002274 systemd-networkd[1025]: calie92fafe0543: Gained IPv6LL Jul 15 11:33:51.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit: BPF prog-id=165 op=LOAD Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3451 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539316663636335376133346661383434386630363465343533303836 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3451 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539316663636335376133346661383434386630363465343533303836 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit: BPF prog-id=166 op=LOAD Jul 15 11:33:51.003000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000365110 items=0 ppid=3451 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539316663636335376133346661383434386630363465343533303836 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.003000 audit: BPF prog-id=167 op=LOAD Jul 15 11:33:51.003000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000365158 items=0 ppid=3451 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539316663636335376133346661383434386630363465343533303836 Jul 15 11:33:51.004000 audit: BPF prog-id=167 op=UNLOAD Jul 15 11:33:51.004000 audit: BPF prog-id=166 op=UNLOAD Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.004000 audit: BPF prog-id=168 op=LOAD Jul 15 11:33:51.004000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000365568 items=0 ppid=3451 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539316663636335376133346661383434386630363465343533303836 Jul 15 11:33:51.064368 systemd-networkd[1025]: vxlan.calico: Gained IPv6LL Jul 15 11:33:51.071090 env[1204]: time="2025-07-15T11:33:51.071060301Z" level=info msg="StartContainer for \"591fccc57a34fa8448f064e4530865f9348ee5b4d0891db001ab329eef0e1419\" returns successfully" Jul 15 11:33:51.072000 audit[3579]: AVC avc: denied { search } for pid=3579 comm="nginx" name="crypto" dev="proc" ino=26831 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c938 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:33:51.072000 audit[3579]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3934ebf728 a2=0 a3=0 items=0 ppid=3451 pid=3579 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c938 key=(null) Jul 15 11:33:51.072000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:33:51.076647 env[1204]: time="2025-07-15T11:33:51.076620654Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:33:51.089992 sshd[3549]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:51.089000 audit[3549]: USER_END pid=3549 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:51.090000 audit[3549]: CRED_DISP pid=3549 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:51.092477 systemd[1]: sshd@8-10.0.0.90:22-10.0.0.1:43568.service: Deactivated successfully. Jul 15 11:33:51.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.90:22-10.0.0.1:43568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:51.093243 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:33:51.093684 systemd-logind[1197]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:33:51.094339 systemd-logind[1197]: Removed session 9. Jul 15 11:33:51.372204 env[1204]: time="2025-07-15T11:33:51.372133401Z" level=info msg="StopPodSandbox for \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\"" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.407 [INFO][3615] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.408 [INFO][3615] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" iface="eth0" netns="/var/run/netns/cni-527622de-560b-c88b-1b46-e3d12ee32c8c" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.408 [INFO][3615] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" iface="eth0" netns="/var/run/netns/cni-527622de-560b-c88b-1b46-e3d12ee32c8c" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.408 [INFO][3615] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" iface="eth0" netns="/var/run/netns/cni-527622de-560b-c88b-1b46-e3d12ee32c8c" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.408 [INFO][3615] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.408 [INFO][3615] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.426 [INFO][3624] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" HandleID="k8s-pod-network.d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.426 [INFO][3624] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.426 [INFO][3624] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.433 [WARNING][3624] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" HandleID="k8s-pod-network.d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.433 [INFO][3624] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" HandleID="k8s-pod-network.d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.435 [INFO][3624] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:51.439514 env[1204]: 2025-07-15 11:33:51.437 [INFO][3615] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:33:51.440378 env[1204]: time="2025-07-15T11:33:51.440306584Z" level=info msg="TearDown network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\" successfully" Jul 15 11:33:51.440378 env[1204]: time="2025-07-15T11:33:51.440351007Z" level=info msg="StopPodSandbox for \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\" returns successfully" Jul 15 11:33:51.441782 systemd[1]: run-netns-cni\x2d527622de\x2d560b\x2dc88b\x2d1b46\x2de3d12ee32c8c.mount: Deactivated successfully. Jul 15 11:33:51.443008 env[1204]: time="2025-07-15T11:33:51.442964570Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f7hlf,Uid:99156ec4-9529-47f6-b199-77d30be5e101,Namespace:calico-system,Attempt:1,}" Jul 15 11:33:51.544901 systemd-networkd[1025]: calidc97345ec97: Link UP Jul 15 11:33:51.547216 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidc97345ec97: link becomes ready Jul 15 11:33:51.546947 systemd-networkd[1025]: calidc97345ec97: Gained carrier Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.488 [INFO][3637] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--f7hlf-eth0 csi-node-driver- calico-system 99156ec4-9529-47f6-b199-77d30be5e101 987 0 2025-07-15 11:33:27 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-f7hlf eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calidc97345ec97 [] [] }} ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Namespace="calico-system" Pod="csi-node-driver-f7hlf" WorkloadEndpoint="localhost-k8s-csi--node--driver--f7hlf-" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.489 [INFO][3637] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Namespace="calico-system" Pod="csi-node-driver-f7hlf" WorkloadEndpoint="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.512 [INFO][3647] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" HandleID="k8s-pod-network.c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.513 [INFO][3647] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" HandleID="k8s-pod-network.c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0004a2380), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-f7hlf", "timestamp":"2025-07-15 11:33:51.512763844 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.513 [INFO][3647] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.513 [INFO][3647] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.513 [INFO][3647] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.519 [INFO][3647] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" host="localhost" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.523 [INFO][3647] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.526 [INFO][3647] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.528 [INFO][3647] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.530 [INFO][3647] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.530 [INFO][3647] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" host="localhost" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.532 [INFO][3647] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.535 [INFO][3647] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" host="localhost" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.540 [INFO][3647] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" host="localhost" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.540 [INFO][3647] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" host="localhost" Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.540 [INFO][3647] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:51.556158 env[1204]: 2025-07-15 11:33:51.540 [INFO][3647] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" HandleID="k8s-pod-network.c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.556763 env[1204]: 2025-07-15 11:33:51.542 [INFO][3637] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Namespace="calico-system" Pod="csi-node-driver-f7hlf" WorkloadEndpoint="localhost-k8s-csi--node--driver--f7hlf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f7hlf-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"99156ec4-9529-47f6-b199-77d30be5e101", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-f7hlf", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidc97345ec97", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:51.556763 env[1204]: 2025-07-15 11:33:51.542 [INFO][3637] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Namespace="calico-system" Pod="csi-node-driver-f7hlf" WorkloadEndpoint="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.556763 env[1204]: 2025-07-15 11:33:51.542 [INFO][3637] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidc97345ec97 ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Namespace="calico-system" Pod="csi-node-driver-f7hlf" WorkloadEndpoint="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.556763 env[1204]: 2025-07-15 11:33:51.546 [INFO][3637] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Namespace="calico-system" Pod="csi-node-driver-f7hlf" WorkloadEndpoint="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.556763 env[1204]: 2025-07-15 11:33:51.547 [INFO][3637] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Namespace="calico-system" Pod="csi-node-driver-f7hlf" WorkloadEndpoint="localhost-k8s-csi--node--driver--f7hlf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f7hlf-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"99156ec4-9529-47f6-b199-77d30be5e101", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c", Pod:"csi-node-driver-f7hlf", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidc97345ec97", MAC:"56:2e:64:ec:80:63", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:51.556763 env[1204]: 2025-07-15 11:33:51.554 [INFO][3637] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c" Namespace="calico-system" Pod="csi-node-driver-f7hlf" WorkloadEndpoint="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:33:51.564864 env[1204]: time="2025-07-15T11:33:51.564805633Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:51.564956 env[1204]: time="2025-07-15T11:33:51.564887386Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:51.564956 env[1204]: time="2025-07-15T11:33:51.564909457Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:51.565128 env[1204]: time="2025-07-15T11:33:51.565084245Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c pid=3671 runtime=io.containerd.runc.v2 Jul 15 11:33:51.564000 audit[3677]: NETFILTER_CFG table=filter:105 family=2 entries=36 op=nft_register_chain pid=3677 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:51.564000 audit[3677]: SYSCALL arch=c000003e syscall=46 success=yes exit=19576 a0=3 a1=7ffdf0e5eb70 a2=0 a3=7ffdf0e5eb5c items=0 ppid=3283 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.564000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:51.575331 systemd[1]: Started cri-containerd-c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c.scope. Jul 15 11:33:51.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit: BPF prog-id=169 op=LOAD Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3671 pid=3682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334383533353839646336613736323330313965653764616236346137 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3671 pid=3682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334383533353839646336613736323330313965653764616236346137 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit: BPF prog-id=170 op=LOAD Jul 15 11:33:51.585000 audit[3682]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001dcb50 items=0 ppid=3671 pid=3682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334383533353839646336613736323330313965653764616236346137 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit: BPF prog-id=171 op=LOAD Jul 15 11:33:51.585000 audit[3682]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001dcb98 items=0 ppid=3671 pid=3682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334383533353839646336613736323330313965653764616236346137 Jul 15 11:33:51.585000 audit: BPF prog-id=171 op=UNLOAD Jul 15 11:33:51.585000 audit: BPF prog-id=170 op=UNLOAD Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { perfmon } for pid=3682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit[3682]: AVC avc: denied { bpf } for pid=3682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:51.585000 audit: BPF prog-id=172 op=LOAD Jul 15 11:33:51.585000 audit[3682]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0001dcfa8 items=0 ppid=3671 pid=3682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:51.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334383533353839646336613736323330313965653764616236346137 Jul 15 11:33:51.587742 systemd-resolved[1150]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:51.597540 env[1204]: time="2025-07-15T11:33:51.597499392Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f7hlf,Uid:99156ec4-9529-47f6-b199-77d30be5e101,Namespace:calico-system,Attempt:1,} returns sandbox id \"c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c\"" Jul 15 11:33:52.380351 env[1204]: time="2025-07-15T11:33:52.380078985Z" level=info msg="StopPodSandbox for \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\"" Jul 15 11:33:52.381224 env[1204]: time="2025-07-15T11:33:52.380198981Z" level=info msg="StopPodSandbox for \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\"" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.452 [INFO][3727] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.452 [INFO][3727] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" iface="eth0" netns="/var/run/netns/cni-1d287b4c-d3a7-4af4-fa40-a3c79d0ae0a3" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.452 [INFO][3727] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" iface="eth0" netns="/var/run/netns/cni-1d287b4c-d3a7-4af4-fa40-a3c79d0ae0a3" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.452 [INFO][3727] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" iface="eth0" netns="/var/run/netns/cni-1d287b4c-d3a7-4af4-fa40-a3c79d0ae0a3" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.452 [INFO][3727] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.452 [INFO][3727] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.478 [INFO][3747] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" HandleID="k8s-pod-network.f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.478 [INFO][3747] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.478 [INFO][3747] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.487 [WARNING][3747] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" HandleID="k8s-pod-network.f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.487 [INFO][3747] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" HandleID="k8s-pod-network.f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.489 [INFO][3747] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:52.495716 env[1204]: 2025-07-15 11:33:52.493 [INFO][3727] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:33:52.497756 env[1204]: time="2025-07-15T11:33:52.495866880Z" level=info msg="TearDown network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\" successfully" Jul 15 11:33:52.497756 env[1204]: time="2025-07-15T11:33:52.495899061Z" level=info msg="StopPodSandbox for \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\" returns successfully" Jul 15 11:33:52.497756 env[1204]: time="2025-07-15T11:33:52.496835066Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vzxgn,Uid:6afb2d3f-5c1b-46b4-b75e-d452cc71537d,Namespace:kube-system,Attempt:1,}" Jul 15 11:33:52.497829 kubelet[1945]: E0715 11:33:52.496234 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:52.498061 systemd[1]: run-netns-cni\x2d1d287b4c\x2dd3a7\x2d4af4\x2dfa40\x2da3c79d0ae0a3.mount: Deactivated successfully. Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.443 [INFO][3722] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.443 [INFO][3722] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" iface="eth0" netns="/var/run/netns/cni-cdadaee2-a5c1-39ee-2423-700a035845b3" Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.444 [INFO][3722] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" iface="eth0" netns="/var/run/netns/cni-cdadaee2-a5c1-39ee-2423-700a035845b3" Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.444 [INFO][3722] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" iface="eth0" netns="/var/run/netns/cni-cdadaee2-a5c1-39ee-2423-700a035845b3" Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.444 [INFO][3722] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.444 [INFO][3722] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.489 [INFO][3742] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" HandleID="k8s-pod-network.af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.489 [INFO][3742] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.490 [INFO][3742] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.495 [WARNING][3742] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" HandleID="k8s-pod-network.af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.495 [INFO][3742] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" HandleID="k8s-pod-network.af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.500 [INFO][3742] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:52.504609 env[1204]: 2025-07-15 11:33:52.502 [INFO][3722] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:33:52.504978 env[1204]: time="2025-07-15T11:33:52.504793747Z" level=info msg="TearDown network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\" successfully" Jul 15 11:33:52.504978 env[1204]: time="2025-07-15T11:33:52.504834774Z" level=info msg="StopPodSandbox for \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\" returns successfully" Jul 15 11:33:52.506944 systemd[1]: run-netns-cni\x2dcdadaee2\x2da5c1\x2d39ee\x2d2423\x2d700a035845b3.mount: Deactivated successfully. Jul 15 11:33:52.509709 env[1204]: time="2025-07-15T11:33:52.509665787Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-95cf67764-44khd,Uid:ad8aa757-a79e-4464-bdcb-025b9e566728,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:33:52.771936 systemd-networkd[1025]: cali693833b3917: Link UP Jul 15 11:33:52.774556 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:33:52.774780 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali693833b3917: link becomes ready Jul 15 11:33:52.775057 systemd-networkd[1025]: cali693833b3917: Gained carrier Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.700 [INFO][3762] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0 coredns-668d6bf9bc- kube-system 6afb2d3f-5c1b-46b4-b75e-d452cc71537d 1004 0 2025-07-15 11:33:14 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-vzxgn eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali693833b3917 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Namespace="kube-system" Pod="coredns-668d6bf9bc-vzxgn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vzxgn-" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.701 [INFO][3762] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Namespace="kube-system" Pod="coredns-668d6bf9bc-vzxgn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.734 [INFO][3793] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" HandleID="k8s-pod-network.f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.734 [INFO][3793] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" HandleID="k8s-pod-network.f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000122e30), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-vzxgn", "timestamp":"2025-07-15 11:33:52.734739039 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.735 [INFO][3793] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.735 [INFO][3793] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.735 [INFO][3793] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.741 [INFO][3793] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" host="localhost" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.745 [INFO][3793] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.748 [INFO][3793] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.749 [INFO][3793] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.751 [INFO][3793] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.751 [INFO][3793] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" host="localhost" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.752 [INFO][3793] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7 Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.757 [INFO][3793] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" host="localhost" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.763 [INFO][3793] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" host="localhost" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.763 [INFO][3793] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" host="localhost" Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.764 [INFO][3793] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:52.785391 env[1204]: 2025-07-15 11:33:52.764 [INFO][3793] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" HandleID="k8s-pod-network.f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.785964 env[1204]: 2025-07-15 11:33:52.766 [INFO][3762] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Namespace="kube-system" Pod="coredns-668d6bf9bc-vzxgn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6afb2d3f-5c1b-46b4-b75e-d452cc71537d", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-vzxgn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali693833b3917", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:52.785964 env[1204]: 2025-07-15 11:33:52.766 [INFO][3762] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Namespace="kube-system" Pod="coredns-668d6bf9bc-vzxgn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.785964 env[1204]: 2025-07-15 11:33:52.766 [INFO][3762] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali693833b3917 ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Namespace="kube-system" Pod="coredns-668d6bf9bc-vzxgn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.785964 env[1204]: 2025-07-15 11:33:52.775 [INFO][3762] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Namespace="kube-system" Pod="coredns-668d6bf9bc-vzxgn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.785964 env[1204]: 2025-07-15 11:33:52.775 [INFO][3762] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Namespace="kube-system" Pod="coredns-668d6bf9bc-vzxgn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6afb2d3f-5c1b-46b4-b75e-d452cc71537d", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7", Pod:"coredns-668d6bf9bc-vzxgn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali693833b3917", MAC:"2e:93:65:26:52:86", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:52.785964 env[1204]: 2025-07-15 11:33:52.782 [INFO][3762] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7" Namespace="kube-system" Pod="coredns-668d6bf9bc-vzxgn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:33:52.800264 env[1204]: time="2025-07-15T11:33:52.800146987Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:52.800264 env[1204]: time="2025-07-15T11:33:52.800226496Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:52.800264 env[1204]: time="2025-07-15T11:33:52.800237236Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:52.800530 env[1204]: time="2025-07-15T11:33:52.800456258Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7 pid=3823 runtime=io.containerd.runc.v2 Jul 15 11:33:52.804000 audit[3833]: NETFILTER_CFG table=filter:106 family=2 entries=46 op=nft_register_chain pid=3833 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:52.804000 audit[3833]: SYSCALL arch=c000003e syscall=46 success=yes exit=23740 a0=3 a1=7fff318c0780 a2=0 a3=7fff318c076c items=0 ppid=3283 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.804000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:52.813468 systemd[1]: Started cri-containerd-f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7.scope. Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.828000 audit: BPF prog-id=173 op=LOAD Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630303936323737356162366234383439303334666537326162613462 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630303936323737356162366234383439303334666537326162613462 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit: BPF prog-id=174 op=LOAD Jul 15 11:33:52.829000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001a32c0 items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630303936323737356162366234383439303334666537326162613462 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit: BPF prog-id=175 op=LOAD Jul 15 11:33:52.829000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001a3308 items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630303936323737356162366234383439303334666537326162613462 Jul 15 11:33:52.829000 audit: BPF prog-id=175 op=UNLOAD Jul 15 11:33:52.829000 audit: BPF prog-id=174 op=UNLOAD Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.829000 audit: BPF prog-id=176 op=LOAD Jul 15 11:33:52.829000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0001a3718 items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630303936323737356162366234383439303334666537326162613462 Jul 15 11:33:52.831632 systemd-resolved[1150]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:52.856777 systemd-networkd[1025]: calidc97345ec97: Gained IPv6LL Jul 15 11:33:52.865770 env[1204]: time="2025-07-15T11:33:52.865702343Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vzxgn,Uid:6afb2d3f-5c1b-46b4-b75e-d452cc71537d,Namespace:kube-system,Attempt:1,} returns sandbox id \"f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7\"" Jul 15 11:33:52.866593 kubelet[1945]: E0715 11:33:52.866566 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:52.868327 env[1204]: time="2025-07-15T11:33:52.868298965Z" level=info msg="CreateContainer within sandbox \"f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:33:52.877025 systemd-networkd[1025]: cali143544822d3: Link UP Jul 15 11:33:52.878882 systemd-networkd[1025]: cali143544822d3: Gained carrier Jul 15 11:33:52.879205 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali143544822d3: link becomes ready Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.696 [INFO][3758] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--95cf67764--44khd-eth0 calico-apiserver-95cf67764- calico-apiserver ad8aa757-a79e-4464-bdcb-025b9e566728 1003 0 2025-07-15 11:33:23 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:95cf67764 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-95cf67764-44khd eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali143544822d3 [] [] }} ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-44khd" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--44khd-" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.696 [INFO][3758] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-44khd" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.739 [INFO][3787] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" HandleID="k8s-pod-network.26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.739 [INFO][3787] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" HandleID="k8s-pod-network.26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002fdc60), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-95cf67764-44khd", "timestamp":"2025-07-15 11:33:52.739088719 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.739 [INFO][3787] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.764 [INFO][3787] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.764 [INFO][3787] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.843 [INFO][3787] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" host="localhost" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.848 [INFO][3787] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.854 [INFO][3787] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.858 [INFO][3787] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.860 [INFO][3787] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.860 [INFO][3787] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" host="localhost" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.861 [INFO][3787] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.865 [INFO][3787] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" host="localhost" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.871 [INFO][3787] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" host="localhost" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.871 [INFO][3787] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" host="localhost" Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.871 [INFO][3787] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:52.890356 env[1204]: 2025-07-15 11:33:52.871 [INFO][3787] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" HandleID="k8s-pod-network.26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.890954 env[1204]: 2025-07-15 11:33:52.874 [INFO][3758] cni-plugin/k8s.go 418: Populated endpoint ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-44khd" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--95cf67764--44khd-eth0", GenerateName:"calico-apiserver-95cf67764-", Namespace:"calico-apiserver", SelfLink:"", UID:"ad8aa757-a79e-4464-bdcb-025b9e566728", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"95cf67764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-95cf67764-44khd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali143544822d3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:52.890954 env[1204]: 2025-07-15 11:33:52.874 [INFO][3758] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-44khd" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.890954 env[1204]: 2025-07-15 11:33:52.874 [INFO][3758] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali143544822d3 ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-44khd" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.890954 env[1204]: 2025-07-15 11:33:52.879 [INFO][3758] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-44khd" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.890954 env[1204]: 2025-07-15 11:33:52.879 [INFO][3758] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-44khd" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--95cf67764--44khd-eth0", GenerateName:"calico-apiserver-95cf67764-", Namespace:"calico-apiserver", SelfLink:"", UID:"ad8aa757-a79e-4464-bdcb-025b9e566728", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"95cf67764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe", Pod:"calico-apiserver-95cf67764-44khd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali143544822d3", MAC:"c2:50:a3:e8:89:2e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:52.890954 env[1204]: 2025-07-15 11:33:52.888 [INFO][3758] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-44khd" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:33:52.895128 env[1204]: time="2025-07-15T11:33:52.895089165Z" level=info msg="CreateContainer within sandbox \"f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"98f2e7245385c0d22e3aa41821ead944400f8ab67b22970ab20b8687e6e3c588\"" Jul 15 11:33:52.895832 env[1204]: time="2025-07-15T11:33:52.895809706Z" level=info msg="StartContainer for \"98f2e7245385c0d22e3aa41821ead944400f8ab67b22970ab20b8687e6e3c588\"" Jul 15 11:33:52.902000 audit[3883]: NETFILTER_CFG table=filter:107 family=2 entries=58 op=nft_register_chain pid=3883 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:52.902000 audit[3883]: SYSCALL arch=c000003e syscall=46 success=yes exit=30584 a0=3 a1=7ffff518cbe0 a2=0 a3=7ffff518cbcc items=0 ppid=3283 pid=3883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.902000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:52.905342 env[1204]: time="2025-07-15T11:33:52.905210803Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:52.905342 env[1204]: time="2025-07-15T11:33:52.905263422Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:52.905342 env[1204]: time="2025-07-15T11:33:52.905276396Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:52.905494 env[1204]: time="2025-07-15T11:33:52.905427670Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe pid=3881 runtime=io.containerd.runc.v2 Jul 15 11:33:52.913636 systemd[1]: Started cri-containerd-98f2e7245385c0d22e3aa41821ead944400f8ab67b22970ab20b8687e6e3c588.scope. Jul 15 11:33:52.918755 systemd[1]: Started cri-containerd-26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe.scope. Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.929000 audit: BPF prog-id=177 op=LOAD Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3823 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663265373234353338356330643232653361613431383231656164 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3823 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663265373234353338356330643232653361613431383231656164 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit: BPF prog-id=178 op=LOAD Jul 15 11:33:52.930000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000288640 items=0 ppid=3823 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663265373234353338356330643232653361613431383231656164 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit: BPF prog-id=179 op=LOAD Jul 15 11:33:52.930000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000288688 items=0 ppid=3823 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663265373234353338356330643232653361613431383231656164 Jul 15 11:33:52.930000 audit: BPF prog-id=179 op=UNLOAD Jul 15 11:33:52.930000 audit: BPF prog-id=178 op=UNLOAD Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.930000 audit: BPF prog-id=180 op=LOAD Jul 15 11:33:52.930000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000288a98 items=0 ppid=3823 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663265373234353338356330643232653361613431383231656164 Jul 15 11:33:52.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit: BPF prog-id=181 op=LOAD Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3881 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623662623432363663336134303863633139613165316162343866 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3881 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623662623432363663336134303863633139613165316162343866 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit: BPF prog-id=182 op=LOAD Jul 15 11:33:52.932000 audit[3892]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00035e5a0 items=0 ppid=3881 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623662623432363663336134303863633139613165316162343866 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit: BPF prog-id=183 op=LOAD Jul 15 11:33:52.932000 audit[3892]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00035e5e8 items=0 ppid=3881 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623662623432363663336134303863633139613165316162343866 Jul 15 11:33:52.932000 audit: BPF prog-id=183 op=UNLOAD Jul 15 11:33:52.932000 audit: BPF prog-id=182 op=UNLOAD Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { perfmon } for pid=3892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit[3892]: AVC avc: denied { bpf } for pid=3892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:52.932000 audit: BPF prog-id=184 op=LOAD Jul 15 11:33:52.932000 audit[3892]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00035e9f8 items=0 ppid=3881 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:52.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623662623432363663336134303863633139613165316162343866 Jul 15 11:33:52.934311 systemd-resolved[1150]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:52.948340 env[1204]: time="2025-07-15T11:33:52.948252582Z" level=info msg="StartContainer for \"98f2e7245385c0d22e3aa41821ead944400f8ab67b22970ab20b8687e6e3c588\" returns successfully" Jul 15 11:33:52.959666 env[1204]: time="2025-07-15T11:33:52.959625930Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-95cf67764-44khd,Uid:ad8aa757-a79e-4464-bdcb-025b9e566728,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe\"" Jul 15 11:33:52.982000 audit[3910]: AVC avc: denied { getattr } for pid=3910 comm="coredns" path="cgroup:[4026532697]" dev="nsfs" ino=4026532697 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c765 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:33:52.982000 audit[3910]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a948 a2=c000509e48 a3=0 items=0 ppid=3823 pid=3910 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c765 key=(null) Jul 15 11:33:52.982000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:33:53.087315 kubelet[1945]: E0715 11:33:53.087100 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:53.100963 kubelet[1945]: I0715 11:33:53.100893 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-vzxgn" podStartSLOduration=39.100869552 podStartE2EDuration="39.100869552s" podCreationTimestamp="2025-07-15 11:33:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:33:53.1004262 +0000 UTC m=+44.820403109" watchObservedRunningTime="2025-07-15 11:33:53.100869552 +0000 UTC m=+44.820846461" Jul 15 11:33:53.120000 audit[3946]: NETFILTER_CFG table=filter:108 family=2 entries=20 op=nft_register_rule pid=3946 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:53.120000 audit[3946]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffdde800cd0 a2=0 a3=7ffdde800cbc items=0 ppid=2067 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:53.120000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:53.128000 audit[3946]: NETFILTER_CFG table=nat:109 family=2 entries=14 op=nft_register_rule pid=3946 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:53.128000 audit[3946]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffdde800cd0 a2=0 a3=0 items=0 ppid=2067 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:53.128000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:53.143000 audit[3948]: NETFILTER_CFG table=filter:110 family=2 entries=17 op=nft_register_rule pid=3948 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:53.143000 audit[3948]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc08c1bea0 a2=0 a3=7ffc08c1be8c items=0 ppid=2067 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:53.143000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:53.151000 audit[3948]: NETFILTER_CFG table=nat:111 family=2 entries=35 op=nft_register_chain pid=3948 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:53.151000 audit[3948]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffc08c1bea0 a2=0 a3=7ffc08c1be8c items=0 ppid=2067 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:53.151000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:53.372567 env[1204]: time="2025-07-15T11:33:53.372422817Z" level=info msg="StopPodSandbox for \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\"" Jul 15 11:33:53.372567 env[1204]: time="2025-07-15T11:33:53.372527834Z" level=info msg="StopPodSandbox for \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\"" Jul 15 11:33:53.373164 env[1204]: time="2025-07-15T11:33:53.372903780Z" level=info msg="StopPodSandbox for \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\"" Jul 15 11:33:53.412682 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2471998037.mount: Deactivated successfully. Jul 15 11:33:53.816353 systemd-networkd[1025]: cali693833b3917: Gained IPv6LL Jul 15 11:33:54.088994 kubelet[1945]: E0715 11:33:54.088889 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:54.328801 systemd-networkd[1025]: cali143544822d3: Gained IPv6LL Jul 15 11:33:54.371580 env[1204]: time="2025-07-15T11:33:54.371486851Z" level=info msg="StopPodSandbox for \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\"" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.198 [INFO][3979] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.198 [INFO][3979] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" iface="eth0" netns="/var/run/netns/cni-329cc094-23db-6ee9-b80d-6076d3b12e78" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.198 [INFO][3979] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" iface="eth0" netns="/var/run/netns/cni-329cc094-23db-6ee9-b80d-6076d3b12e78" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.198 [INFO][3979] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" iface="eth0" netns="/var/run/netns/cni-329cc094-23db-6ee9-b80d-6076d3b12e78" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.198 [INFO][3979] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.198 [INFO][3979] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.216 [INFO][4008] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" HandleID="k8s-pod-network.e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.216 [INFO][4008] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.216 [INFO][4008] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.537 [WARNING][4008] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" HandleID="k8s-pod-network.e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.537 [INFO][4008] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" HandleID="k8s-pod-network.e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.685 [INFO][4008] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:54.692519 env[1204]: 2025-07-15 11:33:54.690 [INFO][3979] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:33:54.693307 env[1204]: time="2025-07-15T11:33:54.692653273Z" level=info msg="TearDown network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\" successfully" Jul 15 11:33:54.693307 env[1204]: time="2025-07-15T11:33:54.692696664Z" level=info msg="StopPodSandbox for \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\" returns successfully" Jul 15 11:33:54.693378 kubelet[1945]: E0715 11:33:54.693030 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:54.694374 env[1204]: time="2025-07-15T11:33:54.693732588Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-x72mh,Uid:272bb4b0-cbde-4852-94b1-dcd2390d1612,Namespace:kube-system,Attempt:1,}" Jul 15 11:33:54.695044 systemd[1]: run-netns-cni\x2d329cc094\x2d23db\x2d6ee9\x2db80d\x2d6076d3b12e78.mount: Deactivated successfully. Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.201 [INFO][3992] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.201 [INFO][3992] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" iface="eth0" netns="/var/run/netns/cni-a9ac941a-913f-835a-ef83-d2a9eedac5f5" Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.201 [INFO][3992] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" iface="eth0" netns="/var/run/netns/cni-a9ac941a-913f-835a-ef83-d2a9eedac5f5" Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.201 [INFO][3992] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" iface="eth0" netns="/var/run/netns/cni-a9ac941a-913f-835a-ef83-d2a9eedac5f5" Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.201 [INFO][3992] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.201 [INFO][3992] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.484 [INFO][4014] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" HandleID="k8s-pod-network.cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.484 [INFO][4014] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.685 [INFO][4014] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.701 [WARNING][4014] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" HandleID="k8s-pod-network.cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.701 [INFO][4014] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" HandleID="k8s-pod-network.cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.704 [INFO][4014] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:54.712767 env[1204]: 2025-07-15 11:33:54.710 [INFO][3992] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:33:54.713485 env[1204]: time="2025-07-15T11:33:54.712950970Z" level=info msg="TearDown network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\" successfully" Jul 15 11:33:54.713485 env[1204]: time="2025-07-15T11:33:54.712993409Z" level=info msg="StopPodSandbox for \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\" returns successfully" Jul 15 11:33:54.715660 systemd[1]: run-netns-cni\x2da9ac941a\x2d913f\x2d835a\x2def83\x2dd2a9eedac5f5.mount: Deactivated successfully. Jul 15 11:33:54.715986 env[1204]: time="2025-07-15T11:33:54.715949865Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-rphg6,Uid:96cc5b07-a2aa-4209-83e0-b3b0bd5789c1,Namespace:calico-system,Attempt:1,}" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.536 [INFO][3978] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.537 [INFO][3978] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" iface="eth0" netns="/var/run/netns/cni-8dc5137a-49ac-5ec2-906d-883d496bcaf1" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.537 [INFO][3978] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" iface="eth0" netns="/var/run/netns/cni-8dc5137a-49ac-5ec2-906d-883d496bcaf1" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.537 [INFO][3978] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" iface="eth0" netns="/var/run/netns/cni-8dc5137a-49ac-5ec2-906d-883d496bcaf1" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.537 [INFO][3978] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.537 [INFO][3978] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.554 [INFO][4046] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" HandleID="k8s-pod-network.61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.554 [INFO][4046] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.704 [INFO][4046] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.711 [WARNING][4046] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" HandleID="k8s-pod-network.61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.711 [INFO][4046] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" HandleID="k8s-pod-network.61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.713 [INFO][4046] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:54.722693 env[1204]: 2025-07-15 11:33:54.720 [INFO][3978] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:33:54.728265 systemd[1]: run-netns-cni\x2d8dc5137a\x2d49ac\x2d5ec2\x2d906d\x2d883d496bcaf1.mount: Deactivated successfully. Jul 15 11:33:54.729351 env[1204]: time="2025-07-15T11:33:54.729170295Z" level=info msg="TearDown network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\" successfully" Jul 15 11:33:54.729406 env[1204]: time="2025-07-15T11:33:54.729350583Z" level=info msg="StopPodSandbox for \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\" returns successfully" Jul 15 11:33:54.730075 env[1204]: time="2025-07-15T11:33:54.730045447Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85f8d685bc-zmqzr,Uid:129c4ac3-7f2d-460d-8ef9-125b67850db7,Namespace:calico-system,Attempt:1,}" Jul 15 11:33:54.748171 env[1204]: time="2025-07-15T11:33:54.748144648Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.704 [INFO][4036] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.704 [INFO][4036] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" iface="eth0" netns="/var/run/netns/cni-9d622a08-682a-4a2f-9204-7fd52623c9dd" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.704 [INFO][4036] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" iface="eth0" netns="/var/run/netns/cni-9d622a08-682a-4a2f-9204-7fd52623c9dd" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.705 [INFO][4036] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" iface="eth0" netns="/var/run/netns/cni-9d622a08-682a-4a2f-9204-7fd52623c9dd" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.705 [INFO][4036] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.705 [INFO][4036] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.755 [INFO][4055] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" HandleID="k8s-pod-network.44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.755 [INFO][4055] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.755 [INFO][4055] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.761 [WARNING][4055] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" HandleID="k8s-pod-network.44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.761 [INFO][4055] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" HandleID="k8s-pod-network.44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.763 [INFO][4055] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:54.766834 env[1204]: 2025-07-15 11:33:54.765 [INFO][4036] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:33:54.767290 env[1204]: time="2025-07-15T11:33:54.766986053Z" level=info msg="TearDown network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\" successfully" Jul 15 11:33:54.767290 env[1204]: time="2025-07-15T11:33:54.767030997Z" level=info msg="StopPodSandbox for \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\" returns successfully" Jul 15 11:33:54.767694 env[1204]: time="2025-07-15T11:33:54.767654477Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-95cf67764-w725p,Uid:3bc095c7-aa20-4cd8-bd19-7dafcdd859ff,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:33:54.769280 systemd[1]: run-netns-cni\x2d9d622a08\x2d682a\x2d4a2f\x2d9204\x2d7fd52623c9dd.mount: Deactivated successfully. Jul 15 11:33:54.908943 env[1204]: time="2025-07-15T11:33:54.908890089Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:54.923170 env[1204]: time="2025-07-15T11:33:54.923125654Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:54.926160 env[1204]: time="2025-07-15T11:33:54.926103168Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:54.926592 env[1204]: time="2025-07-15T11:33:54.926561088Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 15 11:33:54.939047 env[1204]: time="2025-07-15T11:33:54.939007436Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:33:54.939896 env[1204]: time="2025-07-15T11:33:54.939869533Z" level=info msg="CreateContainer within sandbox \"a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:33:54.974784 env[1204]: time="2025-07-15T11:33:54.974683650Z" level=info msg="CreateContainer within sandbox \"a3c2800f90d5b0bc334a58614cbc3fe48760a9244fbc59a55aafc45eee794963\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"9ed08fdfe98da65a58bb3b079e32a148bcc7ea54316683be3595e82ce14ed806\"" Jul 15 11:33:54.979050 env[1204]: time="2025-07-15T11:33:54.979020476Z" level=info msg="StartContainer for \"9ed08fdfe98da65a58bb3b079e32a148bcc7ea54316683be3595e82ce14ed806\"" Jul 15 11:33:55.027257 systemd[1]: Started cri-containerd-9ed08fdfe98da65a58bb3b079e32a148bcc7ea54316683be3595e82ce14ed806.scope. Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.068406 kernel: kauditd_printk_skb: 927 callbacks suppressed Jul 15 11:33:55.068517 kernel: audit: type=1400 audit(1752579235.056:1237): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.068543 kernel: audit: type=1400 audit(1752579235.056:1238): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.068567 kernel: audit: type=1400 audit(1752579235.056:1239): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.079886 kernel: audit: type=1400 audit(1752579235.056:1240): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.079993 kernel: audit: type=1400 audit(1752579235.056:1241): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.080013 kernel: audit: type=1400 audit(1752579235.056:1242): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.080039 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.077835 systemd-networkd[1025]: calia7fa74b0642: Link UP Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.084236 kernel: audit: type=1400 audit(1752579235.056:1243): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.084261 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia7fa74b0642: link becomes ready Jul 15 11:33:55.089227 kernel: audit: type=1400 audit(1752579235.056:1244): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.086584 systemd-networkd[1025]: calia7fa74b0642: Gained carrier Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.096442 kernel: audit: type=1400 audit(1752579235.056:1245): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.096493 kernel: audit: type=1400 audit(1752579235.056:1246): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.056000 audit: BPF prog-id=185 op=LOAD Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3451 pid=4161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965643038666466653938646136356135386262336230373965333261 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3451 pid=4161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965643038666466653938646136356135386262336230373965333261 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.071000 audit: BPF prog-id=186 op=LOAD Jul 15 11:33:55.071000 audit[4161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000308590 items=0 ppid=3451 pid=4161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965643038666466653938646136356135386262336230373965333261 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit: BPF prog-id=187 op=LOAD Jul 15 11:33:55.072000 audit[4161]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003085d8 items=0 ppid=3451 pid=4161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965643038666466653938646136356135386262336230373965333261 Jul 15 11:33:55.072000 audit: BPF prog-id=187 op=UNLOAD Jul 15 11:33:55.072000 audit: BPF prog-id=186 op=UNLOAD Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { perfmon } for pid=4161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit[4161]: AVC avc: denied { bpf } for pid=4161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.072000 audit: BPF prog-id=188 op=LOAD Jul 15 11:33:55.072000 audit[4161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003089e8 items=0 ppid=3451 pid=4161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965643038666466653938646136356135386262336230373965333261 Jul 15 11:33:55.102629 kubelet[1945]: E0715 11:33:55.102601 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:54.968 [INFO][4107] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--95cf67764--w725p-eth0 calico-apiserver-95cf67764- calico-apiserver 3bc095c7-aa20-4cd8-bd19-7dafcdd859ff 1041 0 2025-07-15 11:33:23 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:95cf67764 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-95cf67764-w725p eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calia7fa74b0642 [] [] }} ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-w725p" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--w725p-" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:54.968 [INFO][4107] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-w725p" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.003 [INFO][4132] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" HandleID="k8s-pod-network.ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.003 [INFO][4132] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" HandleID="k8s-pod-network.ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000123740), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-95cf67764-w725p", "timestamp":"2025-07-15 11:33:55.003014566 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.003 [INFO][4132] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.003 [INFO][4132] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.003 [INFO][4132] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.013 [INFO][4132] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" host="localhost" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.019 [INFO][4132] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.024 [INFO][4132] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.029 [INFO][4132] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.036 [INFO][4132] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.036 [INFO][4132] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" host="localhost" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.040 [INFO][4132] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9 Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.046 [INFO][4132] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" host="localhost" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.055 [INFO][4132] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" host="localhost" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.056 [INFO][4132] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" host="localhost" Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.056 [INFO][4132] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:55.114368 env[1204]: 2025-07-15 11:33:55.056 [INFO][4132] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" HandleID="k8s-pod-network.ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:55.116165 env[1204]: 2025-07-15 11:33:55.072 [INFO][4107] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-w725p" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--95cf67764--w725p-eth0", GenerateName:"calico-apiserver-95cf67764-", Namespace:"calico-apiserver", SelfLink:"", UID:"3bc095c7-aa20-4cd8-bd19-7dafcdd859ff", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"95cf67764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-95cf67764-w725p", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia7fa74b0642", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:55.116165 env[1204]: 2025-07-15 11:33:55.072 [INFO][4107] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-w725p" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:55.116165 env[1204]: 2025-07-15 11:33:55.072 [INFO][4107] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia7fa74b0642 ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-w725p" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:55.116165 env[1204]: 2025-07-15 11:33:55.088 [INFO][4107] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-w725p" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:55.116165 env[1204]: 2025-07-15 11:33:55.088 [INFO][4107] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-w725p" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--95cf67764--w725p-eth0", GenerateName:"calico-apiserver-95cf67764-", Namespace:"calico-apiserver", SelfLink:"", UID:"3bc095c7-aa20-4cd8-bd19-7dafcdd859ff", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"95cf67764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9", Pod:"calico-apiserver-95cf67764-w725p", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia7fa74b0642", MAC:"de:02:6c:63:12:26", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:55.116165 env[1204]: 2025-07-15 11:33:55.108 [INFO][4107] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9" Namespace="calico-apiserver" Pod="calico-apiserver-95cf67764-w725p" WorkloadEndpoint="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:33:55.115000 audit[4195]: NETFILTER_CFG table=filter:112 family=2 entries=49 op=nft_register_chain pid=4195 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:55.115000 audit[4195]: SYSCALL arch=c000003e syscall=46 success=yes exit=25452 a0=3 a1=7ffe8c225090 a2=0 a3=7ffe8c22507c items=0 ppid=3283 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.115000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:55.248272 env[1204]: time="2025-07-15T11:33:55.248127632Z" level=info msg="StartContainer for \"9ed08fdfe98da65a58bb3b079e32a148bcc7ea54316683be3595e82ce14ed806\" returns successfully" Jul 15 11:33:55.272744 env[1204]: time="2025-07-15T11:33:55.270408216Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:55.272744 env[1204]: time="2025-07-15T11:33:55.270459913Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:55.272744 env[1204]: time="2025-07-15T11:33:55.270469831Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:55.273765 env[1204]: time="2025-07-15T11:33:55.273703407Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9 pid=4220 runtime=io.containerd.runc.v2 Jul 15 11:33:55.304304 systemd[1]: Started cri-containerd-ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9.scope. Jul 15 11:33:55.318489 systemd-networkd[1025]: calic6a4159ae49: Link UP Jul 15 11:33:55.320716 systemd-networkd[1025]: calic6a4159ae49: Gained carrier Jul 15 11:33:55.321398 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic6a4159ae49: link becomes ready Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:54.950 [INFO][4069] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--x72mh-eth0 coredns-668d6bf9bc- kube-system 272bb4b0-cbde-4852-94b1-dcd2390d1612 1033 0 2025-07-15 11:33:14 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-x72mh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic6a4159ae49 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Namespace="kube-system" Pod="coredns-668d6bf9bc-x72mh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--x72mh-" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:54.950 [INFO][4069] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Namespace="kube-system" Pod="coredns-668d6bf9bc-x72mh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.032 [INFO][4139] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" HandleID="k8s-pod-network.a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.032 [INFO][4139] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" HandleID="k8s-pod-network.a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003af520), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-x72mh", "timestamp":"2025-07-15 11:33:55.030448897 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.033 [INFO][4139] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.057 [INFO][4139] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.057 [INFO][4139] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.111 [INFO][4139] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" host="localhost" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.251 [INFO][4139] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.268 [INFO][4139] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.273 [INFO][4139] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.283 [INFO][4139] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.283 [INFO][4139] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" host="localhost" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.287 [INFO][4139] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05 Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.294 [INFO][4139] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" host="localhost" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.313 [INFO][4139] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" host="localhost" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.313 [INFO][4139] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" host="localhost" Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.313 [INFO][4139] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:55.331276 env[1204]: 2025-07-15 11:33:55.313 [INFO][4139] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" HandleID="k8s-pod-network.a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:55.331912 env[1204]: 2025-07-15 11:33:55.315 [INFO][4069] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Namespace="kube-system" Pod="coredns-668d6bf9bc-x72mh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--x72mh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"272bb4b0-cbde-4852-94b1-dcd2390d1612", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-x72mh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic6a4159ae49", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:55.331912 env[1204]: 2025-07-15 11:33:55.316 [INFO][4069] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Namespace="kube-system" Pod="coredns-668d6bf9bc-x72mh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:55.331912 env[1204]: 2025-07-15 11:33:55.316 [INFO][4069] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic6a4159ae49 ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Namespace="kube-system" Pod="coredns-668d6bf9bc-x72mh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:55.331912 env[1204]: 2025-07-15 11:33:55.318 [INFO][4069] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Namespace="kube-system" Pod="coredns-668d6bf9bc-x72mh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:55.331912 env[1204]: 2025-07-15 11:33:55.318 [INFO][4069] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Namespace="kube-system" Pod="coredns-668d6bf9bc-x72mh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--x72mh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"272bb4b0-cbde-4852-94b1-dcd2390d1612", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05", Pod:"coredns-668d6bf9bc-x72mh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic6a4159ae49", MAC:"c6:b4:09:ec:5d:99", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:55.331912 env[1204]: 2025-07-15 11:33:55.329 [INFO][4069] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05" Namespace="kube-system" Pod="coredns-668d6bf9bc-x72mh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.335000 audit: BPF prog-id=189 op=LOAD Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565346238653665306565363530383932633336663933636163643337 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565346238653665306565363530383932633336663933636163643337 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit: BPF prog-id=190 op=LOAD Jul 15 11:33:55.336000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000094bb0 items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565346238653665306565363530383932633336663933636163643337 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit: BPF prog-id=191 op=LOAD Jul 15 11:33:55.336000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000094bf8 items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565346238653665306565363530383932633336663933636163643337 Jul 15 11:33:55.336000 audit: BPF prog-id=191 op=UNLOAD Jul 15 11:33:55.336000 audit: BPF prog-id=190 op=UNLOAD Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { perfmon } for pid=4231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit[4231]: AVC avc: denied { bpf } for pid=4231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.336000 audit: BPF prog-id=192 op=LOAD Jul 15 11:33:55.336000 audit[4231]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000095008 items=0 ppid=4220 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565346238653665306565363530383932633336663933636163643337 Jul 15 11:33:55.338537 systemd-resolved[1150]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:55.345446 env[1204]: time="2025-07-15T11:33:55.345289959Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:55.345446 env[1204]: time="2025-07-15T11:33:55.345324123Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:55.345446 env[1204]: time="2025-07-15T11:33:55.345333410Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:55.345907 env[1204]: time="2025-07-15T11:33:55.345879876Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05 pid=4263 runtime=io.containerd.runc.v2 Jul 15 11:33:55.353000 audit[4279]: NETFILTER_CFG table=filter:113 family=2 entries=48 op=nft_register_chain pid=4279 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:55.353000 audit[4279]: SYSCALL arch=c000003e syscall=46 success=yes exit=22720 a0=3 a1=7fffa25de510 a2=0 a3=7fffa25de4fc items=0 ppid=3283 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.353000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:55.358846 systemd[1]: Started cri-containerd-a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05.scope. Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.369000 audit: BPF prog-id=193 op=LOAD Jul 15 11:33:55.370000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.370000 audit[4273]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4263 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138343161383234636135306131303233663064353931323537616663 Jul 15 11:33:55.370000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.370000 audit[4273]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4263 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.372125 env[1204]: time="2025-07-15T11:33:55.372031962Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-95cf67764-w725p,Uid:3bc095c7-aa20-4cd8-bd19-7dafcdd859ff,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9\"" Jul 15 11:33:55.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138343161383234636135306131303233663064353931323537616663 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.371000 audit: BPF prog-id=194 op=LOAD Jul 15 11:33:55.371000 audit[4273]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003f88f0 items=0 ppid=4263 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138343161383234636135306131303233663064353931323537616663 Jul 15 11:33:55.372000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.372000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.372000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.372000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.372000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.372000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.372000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.372000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.372000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.372000 audit: BPF prog-id=195 op=LOAD Jul 15 11:33:55.372000 audit[4273]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003f8938 items=0 ppid=4263 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138343161383234636135306131303233663064353931323537616663 Jul 15 11:33:55.374000 audit: BPF prog-id=195 op=UNLOAD Jul 15 11:33:55.374000 audit: BPF prog-id=194 op=UNLOAD Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { perfmon } for pid=4273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit[4273]: AVC avc: denied { bpf } for pid=4273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.374000 audit: BPF prog-id=196 op=LOAD Jul 15 11:33:55.374000 audit[4273]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003f8d48 items=0 ppid=4263 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138343161383234636135306131303233663064353931323537616663 Jul 15 11:33:55.378023 systemd-resolved[1150]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:55.400048 env[1204]: time="2025-07-15T11:33:55.400000806Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-x72mh,Uid:272bb4b0-cbde-4852-94b1-dcd2390d1612,Namespace:kube-system,Attempt:1,} returns sandbox id \"a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05\"" Jul 15 11:33:55.400628 kubelet[1945]: E0715 11:33:55.400601 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:55.402274 env[1204]: time="2025-07-15T11:33:55.402225410Z" level=info msg="CreateContainer within sandbox \"a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:33:55.420027 systemd-networkd[1025]: cali65c88457d87: Link UP Jul 15 11:33:55.422581 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali65c88457d87: link becomes ready Jul 15 11:33:55.421951 systemd-networkd[1025]: cali65c88457d87: Gained carrier Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:54.996 [INFO][4085] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0 calico-kube-controllers-85f8d685bc- calico-system 129c4ac3-7f2d-460d-8ef9-125b67850db7 1035 0 2025-07-15 11:33:27 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:85f8d685bc projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-85f8d685bc-zmqzr eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali65c88457d87 [] [] }} ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Namespace="calico-system" Pod="calico-kube-controllers-85f8d685bc-zmqzr" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:54.996 [INFO][4085] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Namespace="calico-system" Pod="calico-kube-controllers-85f8d685bc-zmqzr" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.065 [INFO][4176] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" HandleID="k8s-pod-network.c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.066 [INFO][4176] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" HandleID="k8s-pod-network.c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025b0f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-85f8d685bc-zmqzr", "timestamp":"2025-07-15 11:33:55.065752451 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.066 [INFO][4176] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.314 [INFO][4176] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.314 [INFO][4176] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.327 [INFO][4176] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" host="localhost" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.353 [INFO][4176] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.369 [INFO][4176] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.375 [INFO][4176] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.377 [INFO][4176] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.377 [INFO][4176] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" host="localhost" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.381 [INFO][4176] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844 Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.388 [INFO][4176] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" host="localhost" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.415 [INFO][4176] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" host="localhost" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.415 [INFO][4176] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" host="localhost" Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.415 [INFO][4176] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:55.441943 env[1204]: 2025-07-15 11:33:55.415 [INFO][4176] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" HandleID="k8s-pod-network.c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:55.442972 env[1204]: 2025-07-15 11:33:55.417 [INFO][4085] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Namespace="calico-system" Pod="calico-kube-controllers-85f8d685bc-zmqzr" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0", GenerateName:"calico-kube-controllers-85f8d685bc-", Namespace:"calico-system", SelfLink:"", UID:"129c4ac3-7f2d-460d-8ef9-125b67850db7", ResourceVersion:"1035", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85f8d685bc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-85f8d685bc-zmqzr", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali65c88457d87", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:55.442972 env[1204]: 2025-07-15 11:33:55.418 [INFO][4085] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Namespace="calico-system" Pod="calico-kube-controllers-85f8d685bc-zmqzr" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:55.442972 env[1204]: 2025-07-15 11:33:55.418 [INFO][4085] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali65c88457d87 ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Namespace="calico-system" Pod="calico-kube-controllers-85f8d685bc-zmqzr" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:55.442972 env[1204]: 2025-07-15 11:33:55.422 [INFO][4085] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Namespace="calico-system" Pod="calico-kube-controllers-85f8d685bc-zmqzr" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:55.442972 env[1204]: 2025-07-15 11:33:55.422 [INFO][4085] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Namespace="calico-system" Pod="calico-kube-controllers-85f8d685bc-zmqzr" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0", GenerateName:"calico-kube-controllers-85f8d685bc-", Namespace:"calico-system", SelfLink:"", UID:"129c4ac3-7f2d-460d-8ef9-125b67850db7", ResourceVersion:"1035", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85f8d685bc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844", Pod:"calico-kube-controllers-85f8d685bc-zmqzr", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali65c88457d87", MAC:"7e:f3:d3:8b:9c:f7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:55.442972 env[1204]: 2025-07-15 11:33:55.439 [INFO][4085] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844" Namespace="calico-system" Pod="calico-kube-controllers-85f8d685bc-zmqzr" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:33:55.451000 audit[4314]: NETFILTER_CFG table=filter:114 family=2 entries=62 op=nft_register_chain pid=4314 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:55.451000 audit[4314]: SYSCALL arch=c000003e syscall=46 success=yes exit=28368 a0=3 a1=7ffe5d5ead30 a2=0 a3=7ffe5d5ead1c items=0 ppid=3283 pid=4314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.451000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:55.492276 env[1204]: time="2025-07-15T11:33:55.492222016Z" level=info msg="CreateContainer within sandbox \"a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"85cdf0305d1cd1b57678e9c78e2eb58ed663128d26290c76f76b2f232b896cfd\"" Jul 15 11:33:55.492941 env[1204]: time="2025-07-15T11:33:55.492920777Z" level=info msg="StartContainer for \"85cdf0305d1cd1b57678e9c78e2eb58ed663128d26290c76f76b2f232b896cfd\"" Jul 15 11:33:55.494341 env[1204]: time="2025-07-15T11:33:55.493969965Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:55.494341 env[1204]: time="2025-07-15T11:33:55.494024146Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:55.494341 env[1204]: time="2025-07-15T11:33:55.494037451Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:55.494341 env[1204]: time="2025-07-15T11:33:55.494201008Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844 pid=4322 runtime=io.containerd.runc.v2 Jul 15 11:33:55.512422 systemd[1]: Started cri-containerd-85cdf0305d1cd1b57678e9c78e2eb58ed663128d26290c76f76b2f232b896cfd.scope. Jul 15 11:33:55.513212 systemd[1]: Started cri-containerd-c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844.scope. Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.535273 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidbcc634583b: link becomes ready Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.526000 audit: BPF prog-id=197 op=LOAD Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=4322 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396565343661653639386337333036343531636535303439343662 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=4322 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396565343661653639386337333036343531636535303439343662 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.527000 audit: BPF prog-id=198 op=LOAD Jul 15 11:33:55.527000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c000362350 items=0 ppid=4322 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396565343661653639386337333036343531636535303439343662 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit: BPF prog-id=199 op=LOAD Jul 15 11:33:55.528000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c000362398 items=0 ppid=4322 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396565343661653639386337333036343531636535303439343662 Jul 15 11:33:55.528000 audit: BPF prog-id=199 op=UNLOAD Jul 15 11:33:55.528000 audit: BPF prog-id=198 op=UNLOAD Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.528000 audit: BPF prog-id=200 op=LOAD Jul 15 11:33:55.528000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c0003627a8 items=0 ppid=4322 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396565343661653639386337333036343531636535303439343662 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit: BPF prog-id=201 op=LOAD Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4263 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835636466303330356431636431623537363738653963373865326562 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4263 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835636466303330356431636431623537363738653963373865326562 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.529000 audit: BPF prog-id=202 op=LOAD Jul 15 11:33:55.529000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00038cd70 items=0 ppid=4263 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835636466303330356431636431623537363738653963373865326562 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit: BPF prog-id=203 op=LOAD Jul 15 11:33:55.531000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00038cdb8 items=0 ppid=4263 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835636466303330356431636431623537363738653963373865326562 Jul 15 11:33:55.531000 audit: BPF prog-id=203 op=UNLOAD Jul 15 11:33:55.531000 audit: BPF prog-id=202 op=UNLOAD Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.531000 audit: BPF prog-id=204 op=LOAD Jul 15 11:33:55.531000 audit[4338]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00038d1c8 items=0 ppid=4263 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835636466303330356431636431623537363738653963373865326562 Jul 15 11:33:55.528228 systemd-networkd[1025]: calidbcc634583b: Link UP Jul 15 11:33:55.530892 systemd-resolved[1150]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:55.532398 systemd-networkd[1025]: calidbcc634583b: Gained carrier Jul 15 11:33:55.556786 env[1204]: time="2025-07-15T11:33:55.556740770Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85f8d685bc-zmqzr,Uid:129c4ac3-7f2d-460d-8ef9-125b67850db7,Namespace:calico-system,Attempt:1,} returns sandbox id \"c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844\"" Jul 15 11:33:55.702000 audit[4357]: AVC avc: denied { getattr } for pid=4357 comm="coredns" path="cgroup:[4026532725]" dev="nsfs" ino=4026532725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c969 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:33:55.702000 audit[4357]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a720 a2=c00013cd38 a3=0 items=0 ppid=4263 pid=4357 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c969 key=(null) Jul 15 11:33:55.702000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:33:55.800096 env[1204]: time="2025-07-15T11:33:55.799959432Z" level=info msg="StartContainer for \"85cdf0305d1cd1b57678e9c78e2eb58ed663128d26290c76f76b2f232b896cfd\" returns successfully" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:54.994 [INFO][4083] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--rphg6-eth0 goldmane-768f4c5c69- calico-system 96cc5b07-a2aa-4209-83e0-b3b0bd5789c1 1032 0 2025-07-15 11:33:26 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-rphg6 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calidbcc634583b [] [] }} ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Namespace="calico-system" Pod="goldmane-768f4c5c69-rphg6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--rphg6-" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:54.994 [INFO][4083] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Namespace="calico-system" Pod="goldmane-768f4c5c69-rphg6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.103 [INFO][4153] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" HandleID="k8s-pod-network.8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.104 [INFO][4153] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" HandleID="k8s-pod-network.8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00050aaa0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-rphg6", "timestamp":"2025-07-15 11:33:55.103938199 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.104 [INFO][4153] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.415 [INFO][4153] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.415 [INFO][4153] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.437 [INFO][4153] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" host="localhost" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.451 [INFO][4153] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.490 [INFO][4153] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.495 [INFO][4153] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.497 [INFO][4153] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.497 [INFO][4153] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" host="localhost" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.499 [INFO][4153] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21 Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.505 [INFO][4153] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" host="localhost" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.515 [INFO][4153] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" host="localhost" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.515 [INFO][4153] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" host="localhost" Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.515 [INFO][4153] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:55.809650 env[1204]: 2025-07-15 11:33:55.515 [INFO][4153] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" HandleID="k8s-pod-network.8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:55.810320 env[1204]: 2025-07-15 11:33:55.522 [INFO][4083] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Namespace="calico-system" Pod="goldmane-768f4c5c69-rphg6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--rphg6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-rphg6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidbcc634583b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:55.810320 env[1204]: 2025-07-15 11:33:55.522 [INFO][4083] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Namespace="calico-system" Pod="goldmane-768f4c5c69-rphg6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:55.810320 env[1204]: 2025-07-15 11:33:55.522 [INFO][4083] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidbcc634583b ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Namespace="calico-system" Pod="goldmane-768f4c5c69-rphg6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:55.810320 env[1204]: 2025-07-15 11:33:55.534 [INFO][4083] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Namespace="calico-system" Pod="goldmane-768f4c5c69-rphg6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:55.810320 env[1204]: 2025-07-15 11:33:55.534 [INFO][4083] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Namespace="calico-system" Pod="goldmane-768f4c5c69-rphg6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--rphg6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21", Pod:"goldmane-768f4c5c69-rphg6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidbcc634583b", MAC:"52:2a:e0:2f:2f:19", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:55.810320 env[1204]: 2025-07-15 11:33:55.805 [INFO][4083] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21" Namespace="calico-system" Pod="goldmane-768f4c5c69-rphg6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:33:55.825774 env[1204]: time="2025-07-15T11:33:55.825700197Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:33:55.825979 env[1204]: time="2025-07-15T11:33:55.825955887Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:33:55.826089 env[1204]: time="2025-07-15T11:33:55.826067005Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:33:55.826505 env[1204]: time="2025-07-15T11:33:55.826458088Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21 pid=4412 runtime=io.containerd.runc.v2 Jul 15 11:33:55.825000 audit[4413]: NETFILTER_CFG table=filter:115 family=2 entries=70 op=nft_register_chain pid=4413 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:33:55.825000 audit[4413]: SYSCALL arch=c000003e syscall=46 success=yes exit=33956 a0=3 a1=7ffc89693390 a2=0 a3=7ffc8969337c items=0 ppid=3283 pid=4413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.825000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:33:55.844672 systemd[1]: Started cri-containerd-8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21.scope. Jul 15 11:33:55.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit: BPF prog-id=205 op=LOAD Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863313463303265623339663730316338303032666535366631303538 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863313463303265623339663730316338303032666535366631303538 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.853000 audit: BPF prog-id=206 op=LOAD Jul 15 11:33:55.853000 audit[4423]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0004002a0 items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863313463303265623339663730316338303032666535366631303538 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit: BPF prog-id=207 op=LOAD Jul 15 11:33:55.854000 audit[4423]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0004002e8 items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863313463303265623339663730316338303032666535366631303538 Jul 15 11:33:55.854000 audit: BPF prog-id=207 op=UNLOAD Jul 15 11:33:55.854000 audit: BPF prog-id=206 op=UNLOAD Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:55.854000 audit: BPF prog-id=208 op=LOAD Jul 15 11:33:55.854000 audit[4423]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0004006f8 items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:55.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863313463303265623339663730316338303032666535366631303538 Jul 15 11:33:55.856127 systemd-resolved[1150]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:33:55.875744 env[1204]: time="2025-07-15T11:33:55.875698705Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-rphg6,Uid:96cc5b07-a2aa-4209-83e0-b3b0bd5789c1,Namespace:calico-system,Attempt:1,} returns sandbox id \"8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21\"" Jul 15 11:33:56.093802 systemd[1]: Started sshd@9-10.0.0.90:22-10.0.0.1:43576.service. Jul 15 11:33:56.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.90:22-10.0.0.1:43576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:56.126000 audit[4447]: USER_ACCT pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:56.127000 audit[4447]: CRED_ACQ pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:56.127000 audit[4447]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3eacc4b0 a2=3 a3=0 items=0 ppid=1 pid=4447 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:56.127000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:56.135000 audit[4447]: USER_START pid=4447 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:56.136000 audit[4449]: CRED_ACQ pid=4449 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:56.142828 kubelet[1945]: E0715 11:33:56.114096 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:56.132344 systemd-logind[1197]: New session 10 of user core. Jul 15 11:33:56.128902 sshd[4447]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:56.143313 sshd[4447]: Accepted publickey for core from 10.0.0.1 port 43576 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:56.133101 systemd[1]: Started session-10.scope. Jul 15 11:33:56.214010 kubelet[1945]: I0715 11:33:56.213932 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-5c559b9b7f-smw4n" podStartSLOduration=1.900250669 podStartE2EDuration="7.213916602s" podCreationTimestamp="2025-07-15 11:33:49 +0000 UTC" firstStartedPulling="2025-07-15 11:33:49.624733823 +0000 UTC m=+41.344710732" lastFinishedPulling="2025-07-15 11:33:54.938399756 +0000 UTC m=+46.658376665" observedRunningTime="2025-07-15 11:33:56.213679027 +0000 UTC m=+47.933655936" watchObservedRunningTime="2025-07-15 11:33:56.213916602 +0000 UTC m=+47.933893511" Jul 15 11:33:56.236000 audit[4459]: NETFILTER_CFG table=filter:116 family=2 entries=13 op=nft_register_rule pid=4459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:56.236000 audit[4459]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffeba2be0c0 a2=0 a3=7ffeba2be0ac items=0 ppid=2067 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:56.236000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:56.241000 audit[4459]: NETFILTER_CFG table=nat:117 family=2 entries=27 op=nft_register_chain pid=4459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:56.241000 audit[4459]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffeba2be0c0 a2=0 a3=7ffeba2be0ac items=0 ppid=2067 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:56.241000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:56.265000 audit[4461]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:56.265000 audit[4461]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcec241af0 a2=0 a3=7ffcec241adc items=0 ppid=2067 pid=4461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:56.265000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:56.279000 audit[4461]: NETFILTER_CFG table=nat:119 family=2 entries=58 op=nft_register_chain pid=4461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:56.279000 audit[4461]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffcec241af0 a2=0 a3=7ffcec241adc items=0 ppid=2067 pid=4461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:56.279000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:56.356472 sshd[4447]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:56.356000 audit[4447]: USER_END pid=4447 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:56.356000 audit[4447]: CRED_DISP pid=4447 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:56.358763 systemd[1]: sshd@9-10.0.0.90:22-10.0.0.1:43576.service: Deactivated successfully. Jul 15 11:33:56.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.90:22-10.0.0.1:43576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:56.359469 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:33:56.360047 systemd-logind[1197]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:33:56.360810 systemd-logind[1197]: Removed session 10. Jul 15 11:33:56.443273 systemd-networkd[1025]: calia7fa74b0642: Gained IPv6LL Jul 15 11:33:56.761376 systemd-networkd[1025]: calidbcc634583b: Gained IPv6LL Jul 15 11:33:57.118887 kubelet[1945]: E0715 11:33:57.118766 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:57.171850 env[1204]: time="2025-07-15T11:33:57.171792863Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:57.174304 env[1204]: time="2025-07-15T11:33:57.174252126Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:57.176083 env[1204]: time="2025-07-15T11:33:57.176039459Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:57.177559 env[1204]: time="2025-07-15T11:33:57.177517450Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:33:57.178040 env[1204]: time="2025-07-15T11:33:57.178008542Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 15 11:33:57.179261 env[1204]: time="2025-07-15T11:33:57.179233790Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:33:57.180421 env[1204]: time="2025-07-15T11:33:57.180384929Z" level=info msg="CreateContainer within sandbox \"c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:33:57.200380 env[1204]: time="2025-07-15T11:33:57.200325672Z" level=info msg="CreateContainer within sandbox \"c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"1b630c7d14c4234707ef0a1d3c7edc68e6dcdbf79d40d015ede696d08943a2ce\"" Jul 15 11:33:57.200853 env[1204]: time="2025-07-15T11:33:57.200812654Z" level=info msg="StartContainer for \"1b630c7d14c4234707ef0a1d3c7edc68e6dcdbf79d40d015ede696d08943a2ce\"" Jul 15 11:33:57.209515 systemd-networkd[1025]: calic6a4159ae49: Gained IPv6LL Jul 15 11:33:57.222046 systemd[1]: run-containerd-runc-k8s.io-1b630c7d14c4234707ef0a1d3c7edc68e6dcdbf79d40d015ede696d08943a2ce-runc.kEPfcy.mount: Deactivated successfully. Jul 15 11:33:57.223400 systemd[1]: Started cri-containerd-1b630c7d14c4234707ef0a1d3c7edc68e6dcdbf79d40d015ede696d08943a2ce.scope. Jul 15 11:33:57.234000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.234000 audit[4474]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f5726de85a8 items=0 ppid=3671 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:57.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162363330633764313463343233343730376566306131643363376564 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit: BPF prog-id=209 op=LOAD Jul 15 11:33:57.235000 audit[4474]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000c34c8 items=0 ppid=3671 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:57.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162363330633764313463343233343730376566306131643363376564 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit: BPF prog-id=210 op=LOAD Jul 15 11:33:57.235000 audit[4474]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000c3518 items=0 ppid=3671 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:57.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162363330633764313463343233343730376566306131643363376564 Jul 15 11:33:57.235000 audit: BPF prog-id=210 op=UNLOAD Jul 15 11:33:57.235000 audit: BPF prog-id=209 op=UNLOAD Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:33:57.235000 audit: BPF prog-id=211 op=LOAD Jul 15 11:33:57.235000 audit[4474]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000c35a8 items=0 ppid=3671 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:57.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162363330633764313463343233343730376566306131643363376564 Jul 15 11:33:57.248415 env[1204]: time="2025-07-15T11:33:57.248361561Z" level=info msg="StartContainer for \"1b630c7d14c4234707ef0a1d3c7edc68e6dcdbf79d40d015ede696d08943a2ce\" returns successfully" Jul 15 11:33:57.272389 systemd-networkd[1025]: cali65c88457d87: Gained IPv6LL Jul 15 11:33:58.122434 kubelet[1945]: E0715 11:33:58.122399 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:34:00.759332 env[1204]: time="2025-07-15T11:34:00.759275153Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:00.761636 env[1204]: time="2025-07-15T11:34:00.761599920Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:00.763139 env[1204]: time="2025-07-15T11:34:00.763099594Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:00.764561 env[1204]: time="2025-07-15T11:34:00.764540226Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:00.764902 env[1204]: time="2025-07-15T11:34:00.764879415Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:34:00.766032 env[1204]: time="2025-07-15T11:34:00.765840754Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:34:00.767321 env[1204]: time="2025-07-15T11:34:00.767257362Z" level=info msg="CreateContainer within sandbox \"26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:34:00.781952 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1138153141.mount: Deactivated successfully. Jul 15 11:34:00.784355 env[1204]: time="2025-07-15T11:34:00.784310099Z" level=info msg="CreateContainer within sandbox \"26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"afe762982b749475a565398d116bb8f7fa7e648390d45568a006941b12b4d5c2\"" Jul 15 11:34:00.784847 env[1204]: time="2025-07-15T11:34:00.784820640Z" level=info msg="StartContainer for \"afe762982b749475a565398d116bb8f7fa7e648390d45568a006941b12b4d5c2\"" Jul 15 11:34:00.807228 systemd[1]: run-containerd-runc-k8s.io-afe762982b749475a565398d116bb8f7fa7e648390d45568a006941b12b4d5c2-runc.PKJBZx.mount: Deactivated successfully. Jul 15 11:34:00.808647 systemd[1]: Started cri-containerd-afe762982b749475a565398d116bb8f7fa7e648390d45568a006941b12b4d5c2.scope. Jul 15 11:34:00.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.822903 kernel: kauditd_printk_skb: 413 callbacks suppressed Jul 15 11:34:00.822976 kernel: audit: type=1400 audit(1752579240.820:1369): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.828570 kernel: audit: type=1400 audit(1752579240.820:1370): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.828626 kernel: audit: type=1400 audit(1752579240.820:1371): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.831380 kernel: audit: type=1400 audit(1752579240.820:1372): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.834217 kernel: audit: type=1400 audit(1752579240.820:1373): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.837055 kernel: audit: type=1400 audit(1752579240.820:1374): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.839872 kernel: audit: type=1400 audit(1752579240.820:1375): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.842731 kernel: audit: type=1400 audit(1752579240.820:1376): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.848443 kernel: audit: type=1400 audit(1752579240.820:1377): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.848486 kernel: audit: type=1400 audit(1752579240.824:1378): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit: BPF prog-id=212 op=LOAD Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3881 pid=4515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:00.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166653736323938326237343934373561353635333938643131366262 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3881 pid=4515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:00.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166653736323938326237343934373561353635333938643131366262 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.824000 audit: BPF prog-id=213 op=LOAD Jul 15 11:34:00.824000 audit[4515]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024720 items=0 ppid=3881 pid=4515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:00.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166653736323938326237343934373561353635333938643131366262 Jul 15 11:34:00.830000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.830000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.830000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.830000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.830000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.830000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.830000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.830000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.830000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.830000 audit: BPF prog-id=214 op=LOAD Jul 15 11:34:00.830000 audit[4515]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024768 items=0 ppid=3881 pid=4515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:00.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166653736323938326237343934373561353635333938643131366262 Jul 15 11:34:00.833000 audit: BPF prog-id=214 op=UNLOAD Jul 15 11:34:00.833000 audit: BPF prog-id=213 op=UNLOAD Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { perfmon } for pid=4515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit[4515]: AVC avc: denied { bpf } for pid=4515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:00.833000 audit: BPF prog-id=215 op=LOAD Jul 15 11:34:00.833000 audit[4515]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024b78 items=0 ppid=3881 pid=4515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:00.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166653736323938326237343934373561353635333938643131366262 Jul 15 11:34:00.896655 env[1204]: time="2025-07-15T11:34:00.896600835Z" level=info msg="StartContainer for \"afe762982b749475a565398d116bb8f7fa7e648390d45568a006941b12b4d5c2\" returns successfully" Jul 15 11:34:01.132484 env[1204]: time="2025-07-15T11:34:01.132376148Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:01.134767 env[1204]: time="2025-07-15T11:34:01.134722543Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:01.136152 env[1204]: time="2025-07-15T11:34:01.136110035Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:01.139003 env[1204]: time="2025-07-15T11:34:01.138964245Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:01.139437 env[1204]: time="2025-07-15T11:34:01.139406713Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:34:01.141803 env[1204]: time="2025-07-15T11:34:01.141774108Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:34:01.143794 kubelet[1945]: I0715 11:34:01.143720 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-x72mh" podStartSLOduration=47.143695547 podStartE2EDuration="47.143695547s" podCreationTimestamp="2025-07-15 11:33:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:33:56.230496291 +0000 UTC m=+47.950473200" watchObservedRunningTime="2025-07-15 11:34:01.143695547 +0000 UTC m=+52.863672456" Jul 15 11:34:01.144377 env[1204]: time="2025-07-15T11:34:01.144333776Z" level=info msg="CreateContainer within sandbox \"ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:34:01.161000 audit[4553]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4553 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:01.161000 audit[4553]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffe95439e0 a2=0 a3=7fffe95439cc items=0 ppid=2067 pid=4553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:01.161000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:01.163938 env[1204]: time="2025-07-15T11:34:01.163890802Z" level=info msg="CreateContainer within sandbox \"ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"4ab8a96a4ed4c1f571373bdb371d051f413373188607eb58f92905d4e570d72b\"" Jul 15 11:34:01.164808 env[1204]: time="2025-07-15T11:34:01.164754018Z" level=info msg="StartContainer for \"4ab8a96a4ed4c1f571373bdb371d051f413373188607eb58f92905d4e570d72b\"" Jul 15 11:34:01.169000 audit[4553]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=4553 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:01.169000 audit[4553]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fffe95439e0 a2=0 a3=7fffe95439cc items=0 ppid=2067 pid=4553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:01.169000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:01.178340 systemd[1]: Started cri-containerd-4ab8a96a4ed4c1f571373bdb371d051f413373188607eb58f92905d4e570d72b.scope. Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.192000 audit: BPF prog-id=216 op=LOAD Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4220 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:01.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461623861393661346564346331663537313337336264623337316430 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4220 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:01.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461623861393661346564346331663537313337336264623337316430 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit: BPF prog-id=217 op=LOAD Jul 15 11:34:01.193000 audit[4561]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003904a0 items=0 ppid=4220 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:01.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461623861393661346564346331663537313337336264623337316430 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit: BPF prog-id=218 op=LOAD Jul 15 11:34:01.193000 audit[4561]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003904e8 items=0 ppid=4220 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:01.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461623861393661346564346331663537313337336264623337316430 Jul 15 11:34:01.193000 audit: BPF prog-id=218 op=UNLOAD Jul 15 11:34:01.193000 audit: BPF prog-id=217 op=UNLOAD Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:01.193000 audit: BPF prog-id=219 op=LOAD Jul 15 11:34:01.193000 audit[4561]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003908f8 items=0 ppid=4220 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:01.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461623861393661346564346331663537313337336264623337316430 Jul 15 11:34:01.220498 env[1204]: time="2025-07-15T11:34:01.220445685Z" level=info msg="StartContainer for \"4ab8a96a4ed4c1f571373bdb371d051f413373188607eb58f92905d4e570d72b\" returns successfully" Jul 15 11:34:01.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.90:22-10.0.0.1:47802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:01.363685 systemd[1]: Started sshd@10-10.0.0.90:22-10.0.0.1:47802.service. Jul 15 11:34:01.397000 audit[4596]: USER_ACCT pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:01.399422 sshd[4596]: Accepted publickey for core from 10.0.0.1 port 47802 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:01.399000 audit[4596]: CRED_ACQ pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:01.399000 audit[4596]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff295273e0 a2=3 a3=0 items=0 ppid=1 pid=4596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:01.399000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:01.401028 sshd[4596]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:01.406126 systemd[1]: Started session-11.scope. Jul 15 11:34:01.407377 systemd-logind[1197]: New session 11 of user core. Jul 15 11:34:01.412000 audit[4596]: USER_START pid=4596 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:01.413000 audit[4598]: CRED_ACQ pid=4598 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:01.670000 audit[4526]: AVC avc: denied { watch } for pid=4526 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_33_39.3678140981/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c354,c998 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c354,c998 tclass=file permissive=0 Jul 15 11:34:01.670000 audit[4526]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003cac20 a2=fc6 a3=0 items=0 ppid=3881 pid=4526 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c354,c998 key=(null) Jul 15 11:34:01.670000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:34:02.132934 kubelet[1945]: I0715 11:34:02.132806 1945 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:34:02.145915 kubelet[1945]: I0715 11:34:02.145835 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-95cf67764-44khd" podStartSLOduration=31.341199525 podStartE2EDuration="39.145816813s" podCreationTimestamp="2025-07-15 11:33:23 +0000 UTC" firstStartedPulling="2025-07-15 11:33:52.961047255 +0000 UTC m=+44.681024164" lastFinishedPulling="2025-07-15 11:34:00.765664533 +0000 UTC m=+52.485641452" observedRunningTime="2025-07-15 11:34:01.144081306 +0000 UTC m=+52.864058215" watchObservedRunningTime="2025-07-15 11:34:02.145816813 +0000 UTC m=+53.865793712" Jul 15 11:34:02.157000 audit[4610]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4610 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:02.157000 audit[4610]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffe6544530 a2=0 a3=7fffe654451c items=0 ppid=2067 pid=4610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:02.157000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:02.166000 audit[4610]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=4610 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:02.166000 audit[4610]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fffe6544530 a2=0 a3=7fffe654451c items=0 ppid=2067 pid=4610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:02.166000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:02.249946 sshd[4596]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:02.249000 audit[4596]: USER_END pid=4596 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.250000 audit[4596]: CRED_DISP pid=4596 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.90:22-10.0.0.1:47816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:02.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.90:22-10.0.0.1:47802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:02.253123 systemd[1]: Started sshd@11-10.0.0.90:22-10.0.0.1:47816.service. Jul 15 11:34:02.254122 systemd[1]: sshd@10-10.0.0.90:22-10.0.0.1:47802.service: Deactivated successfully. Jul 15 11:34:02.255033 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:34:02.255784 systemd-logind[1197]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:34:02.256562 systemd-logind[1197]: Removed session 11. Jul 15 11:34:02.281000 audit[4612]: USER_ACCT pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.282729 sshd[4612]: Accepted publickey for core from 10.0.0.1 port 47816 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:02.282000 audit[4612]: CRED_ACQ pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.282000 audit[4612]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde8365c60 a2=3 a3=0 items=0 ppid=1 pid=4612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:02.282000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:02.283758 sshd[4612]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:02.288398 systemd-logind[1197]: New session 12 of user core. Jul 15 11:34:02.288691 systemd[1]: Started session-12.scope. Jul 15 11:34:02.292000 audit[4612]: USER_START pid=4612 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.294000 audit[4615]: CRED_ACQ pid=4615 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.430008 sshd[4612]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:02.430000 audit[4612]: USER_END pid=4612 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.430000 audit[4612]: CRED_DISP pid=4612 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.433784 systemd[1]: Started sshd@12-10.0.0.90:22-10.0.0.1:47830.service. Jul 15 11:34:02.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.90:22-10.0.0.1:47830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:02.436170 systemd[1]: sshd@11-10.0.0.90:22-10.0.0.1:47816.service: Deactivated successfully. Jul 15 11:34:02.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.90:22-10.0.0.1:47816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:02.436903 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:34:02.437911 systemd-logind[1197]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:34:02.439956 systemd-logind[1197]: Removed session 12. Jul 15 11:34:02.467000 audit[4624]: USER_ACCT pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.469360 sshd[4624]: Accepted publickey for core from 10.0.0.1 port 47830 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:02.470000 audit[4624]: CRED_ACQ pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.470000 audit[4624]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2285d030 a2=3 a3=0 items=0 ppid=1 pid=4624 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:02.470000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:02.471871 sshd[4624]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:02.476882 systemd[1]: Started session-13.scope. Jul 15 11:34:02.478089 systemd-logind[1197]: New session 13 of user core. Jul 15 11:34:02.485000 audit[4624]: USER_START pid=4624 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.486000 audit[4627]: CRED_ACQ pid=4627 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.504000 audit[4572]: AVC avc: denied { watch } for pid=4572 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_33_39.678484931/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c526,c721 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c526,c721 tclass=file permissive=0 Jul 15 11:34:02.504000 audit[4572]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000149220 a2=fc6 a3=0 items=0 ppid=4220 pid=4572 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c526,c721 key=(null) Jul 15 11:34:02.504000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:34:02.756363 sshd[4624]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:02.756000 audit[4624]: USER_END pid=4624 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.756000 audit[4624]: CRED_DISP pid=4624 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:02.759548 systemd[1]: sshd@12-10.0.0.90:22-10.0.0.1:47830.service: Deactivated successfully. Jul 15 11:34:02.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.90:22-10.0.0.1:47830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:02.760352 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:34:02.760887 systemd-logind[1197]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:34:02.761616 systemd-logind[1197]: Removed session 13. Jul 15 11:34:02.778000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:02.778000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00110f650 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:34:02.778000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:02.778000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:02.778000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002538780 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:34:02.778000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:03.134990 kubelet[1945]: I0715 11:34:03.134883 1945 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:34:03.199000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:03.199000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:03.199000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c013dcf4a0 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:34:03.199000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c013c0b6b0 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:34:03.199000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:34:03.199000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:34:03.201000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:03.201000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c010d8fa60 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:34:03.201000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:34:03.203000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:03.203000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c013dcf500 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:34:03.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:34:03.208000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:03.208000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c013e3aab0 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:34:03.208000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:34:03.208000 audit[1825]: AVC avc: denied { watch } for pid=1825 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:03.208000 audit[1825]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c010d8fa80 a2=fc6 a3=0 items=0 ppid=1647 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c326 key=(null) Jul 15 11:34:03.208000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:34:05.265426 env[1204]: time="2025-07-15T11:34:05.265365385Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:05.267349 env[1204]: time="2025-07-15T11:34:05.267304345Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:05.268787 env[1204]: time="2025-07-15T11:34:05.268747316Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:05.270267 env[1204]: time="2025-07-15T11:34:05.270234321Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:05.270700 env[1204]: time="2025-07-15T11:34:05.270644344Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 15 11:34:05.286960 env[1204]: time="2025-07-15T11:34:05.286916210Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:34:05.304837 env[1204]: time="2025-07-15T11:34:05.304788893Z" level=info msg="CreateContainer within sandbox \"c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:34:05.329084 env[1204]: time="2025-07-15T11:34:05.329032906Z" level=info msg="CreateContainer within sandbox \"c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"cfcdbe6048d7ff9ac958b967d86f47accae97a8e80f3e63775b5f3a9669e2046\"" Jul 15 11:34:05.333431 env[1204]: time="2025-07-15T11:34:05.333379951Z" level=info msg="StartContainer for \"cfcdbe6048d7ff9ac958b967d86f47accae97a8e80f3e63775b5f3a9669e2046\"" Jul 15 11:34:05.358380 systemd[1]: Started cri-containerd-cfcdbe6048d7ff9ac958b967d86f47accae97a8e80f3e63775b5f3a9669e2046.scope. Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.372000 audit: BPF prog-id=220 op=LOAD Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4322 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:05.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366636462653630343864376666396163393538623936376438366634 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4322 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:05.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366636462653630343864376666396163393538623936376438366634 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit: BPF prog-id=221 op=LOAD Jul 15 11:34:05.373000 audit[4646]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000210d70 items=0 ppid=4322 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:05.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366636462653630343864376666396163393538623936376438366634 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit: BPF prog-id=222 op=LOAD Jul 15 11:34:05.373000 audit[4646]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000210db8 items=0 ppid=4322 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:05.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366636462653630343864376666396163393538623936376438366634 Jul 15 11:34:05.373000 audit: BPF prog-id=222 op=UNLOAD Jul 15 11:34:05.373000 audit: BPF prog-id=221 op=UNLOAD Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:05.373000 audit: BPF prog-id=223 op=LOAD Jul 15 11:34:05.373000 audit[4646]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002111c8 items=0 ppid=4322 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:05.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366636462653630343864376666396163393538623936376438366634 Jul 15 11:34:05.609421 env[1204]: time="2025-07-15T11:34:05.609263345Z" level=info msg="StartContainer for \"cfcdbe6048d7ff9ac958b967d86f47accae97a8e80f3e63775b5f3a9669e2046\" returns successfully" Jul 15 11:34:06.165836 kubelet[1945]: I0715 11:34:06.165737 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-95cf67764-w725p" podStartSLOduration=37.397906372 podStartE2EDuration="43.165662114s" podCreationTimestamp="2025-07-15 11:33:23 +0000 UTC" firstStartedPulling="2025-07-15 11:33:55.3731398 +0000 UTC m=+47.093116700" lastFinishedPulling="2025-07-15 11:34:01.140895533 +0000 UTC m=+52.860872442" observedRunningTime="2025-07-15 11:34:02.146384905 +0000 UTC m=+53.866361814" watchObservedRunningTime="2025-07-15 11:34:06.165662114 +0000 UTC m=+57.885639023" Jul 15 11:34:06.166308 kubelet[1945]: I0715 11:34:06.166230 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-85f8d685bc-zmqzr" podStartSLOduration=29.449204905 podStartE2EDuration="39.166221815s" podCreationTimestamp="2025-07-15 11:33:27 +0000 UTC" firstStartedPulling="2025-07-15 11:33:55.558058212 +0000 UTC m=+47.278035111" lastFinishedPulling="2025-07-15 11:34:05.275075112 +0000 UTC m=+56.995052021" observedRunningTime="2025-07-15 11:34:06.164418451 +0000 UTC m=+57.884395360" watchObservedRunningTime="2025-07-15 11:34:06.166221815 +0000 UTC m=+57.886198725" Jul 15 11:34:07.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.90:22-10.0.0.1:47844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:07.760881 systemd[1]: Started sshd@13-10.0.0.90:22-10.0.0.1:47844.service. Jul 15 11:34:07.761825 kernel: kauditd_printk_skb: 236 callbacks suppressed Jul 15 11:34:07.761931 kernel: audit: type=1130 audit(1752579247.759:1464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.90:22-10.0.0.1:47844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:07.766484 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2673772623.mount: Deactivated successfully. Jul 15 11:34:07.796000 audit[4711]: USER_ACCT pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:07.798613 sshd[4711]: Accepted publickey for core from 10.0.0.1 port 47844 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:07.799713 sshd[4711]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:07.810747 kernel: audit: type=1101 audit(1752579247.796:1465): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:07.810829 kernel: audit: type=1103 audit(1752579247.798:1466): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:07.810855 kernel: audit: type=1006 audit(1752579247.798:1467): pid=4711 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 15 11:34:07.798000 audit[4711]: CRED_ACQ pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:07.807544 systemd-logind[1197]: New session 14 of user core. Jul 15 11:34:07.808260 systemd[1]: Started session-14.scope. Jul 15 11:34:07.816616 kernel: audit: type=1300 audit(1752579247.798:1467): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3c0b92e0 a2=3 a3=0 items=0 ppid=1 pid=4711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:07.816654 kernel: audit: type=1327 audit(1752579247.798:1467): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:07.798000 audit[4711]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3c0b92e0 a2=3 a3=0 items=0 ppid=1 pid=4711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:07.798000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:07.810000 audit[4711]: USER_START pid=4711 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:07.826040 kernel: audit: type=1105 audit(1752579247.810:1468): pid=4711 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:07.826082 kernel: audit: type=1103 audit(1752579247.812:1469): pid=4713 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:07.812000 audit[4713]: CRED_ACQ pid=4713 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.363000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:08.392339 kernel: audit: type=1400 audit(1752579248.363:1470): avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:08.363000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002538b80 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:34:08.398295 kernel: audit: type=1300 audit(1752579248.363:1470): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002538b80 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:34:08.363000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:08.363000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:08.363000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00306c120 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:34:08.363000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:08.375000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:08.375000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003190fe0 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:34:08.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:08.375000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:08.375000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00082dde0 a2=fc6 a3=0 items=0 ppid=1682 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c729 key=(null) Jul 15 11:34:08.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:08.561841 sshd[4711]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:08.562000 audit[4711]: USER_END pid=4711 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.562000 audit[4711]: CRED_DISP pid=4711 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:08.564956 systemd[1]: sshd@13-10.0.0.90:22-10.0.0.1:47844.service: Deactivated successfully. Jul 15 11:34:08.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.90:22-10.0.0.1:47844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:08.565673 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:34:08.566440 systemd-logind[1197]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:34:08.567335 systemd-logind[1197]: Removed session 14. Jul 15 11:34:08.624323 env[1204]: time="2025-07-15T11:34:08.624272657Z" level=info msg="StopPodSandbox for \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\"" Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.694 [WARNING][4737] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6afb2d3f-5c1b-46b4-b75e-d452cc71537d", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7", Pod:"coredns-668d6bf9bc-vzxgn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali693833b3917", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.695 [INFO][4737] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.695 [INFO][4737] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" iface="eth0" netns="" Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.695 [INFO][4737] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.695 [INFO][4737] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.727 [INFO][4745] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" HandleID="k8s-pod-network.f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.727 [INFO][4745] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.727 [INFO][4745] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.734 [WARNING][4745] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" HandleID="k8s-pod-network.f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.734 [INFO][4745] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" HandleID="k8s-pod-network.f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.735 [INFO][4745] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:08.740436 env[1204]: 2025-07-15 11:34:08.738 [INFO][4737] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:34:08.741210 env[1204]: time="2025-07-15T11:34:08.741153992Z" level=info msg="TearDown network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\" successfully" Jul 15 11:34:08.741309 env[1204]: time="2025-07-15T11:34:08.741275396Z" level=info msg="StopPodSandbox for \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\" returns successfully" Jul 15 11:34:08.742032 env[1204]: time="2025-07-15T11:34:08.741997088Z" level=info msg="RemovePodSandbox for \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\"" Jul 15 11:34:08.742092 env[1204]: time="2025-07-15T11:34:08.742046363Z" level=info msg="Forcibly stopping sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\"" Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.774 [WARNING][4762] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6afb2d3f-5c1b-46b4-b75e-d452cc71537d", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f00962775ab6b4849034fe72aba4b61170e363ffdf4feef22705a207d463f1b7", Pod:"coredns-668d6bf9bc-vzxgn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali693833b3917", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.775 [INFO][4762] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.775 [INFO][4762] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" iface="eth0" netns="" Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.775 [INFO][4762] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.775 [INFO][4762] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.798 [INFO][4770] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" HandleID="k8s-pod-network.f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.798 [INFO][4770] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.798 [INFO][4770] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.805 [WARNING][4770] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" HandleID="k8s-pod-network.f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.805 [INFO][4770] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" HandleID="k8s-pod-network.f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Workload="localhost-k8s-coredns--668d6bf9bc--vzxgn-eth0" Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.806 [INFO][4770] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:08.812261 env[1204]: 2025-07-15 11:34:08.809 [INFO][4762] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55" Jul 15 11:34:08.813107 env[1204]: time="2025-07-15T11:34:08.812290010Z" level=info msg="TearDown network for sandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\" successfully" Jul 15 11:34:09.987120 env[1204]: time="2025-07-15T11:34:09.987042350Z" level=info msg="RemovePodSandbox \"f24738e297c3715a5ce72476fcc30d9d046a63f1597d718696321155586bbf55\" returns successfully" Jul 15 11:34:09.987973 env[1204]: time="2025-07-15T11:34:09.987933407Z" level=info msg="StopPodSandbox for \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\"" Jul 15 11:34:10.018041 env[1204]: time="2025-07-15T11:34:10.017969822Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:10.022288 env[1204]: time="2025-07-15T11:34:10.022245297Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:10.026889 env[1204]: time="2025-07-15T11:34:10.025426534Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:10.029905 env[1204]: time="2025-07-15T11:34:10.029831780Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:10.030596 env[1204]: time="2025-07-15T11:34:10.030556987Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 15 11:34:10.031734 env[1204]: time="2025-07-15T11:34:10.031706281Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:34:10.036411 env[1204]: time="2025-07-15T11:34:10.036336740Z" level=info msg="CreateContainer within sandbox \"8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:34:10.051848 env[1204]: time="2025-07-15T11:34:10.051791589Z" level=info msg="CreateContainer within sandbox \"8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"51ddda6ab36d927853ed2d8f6f64450c3dd5bf28f727ff33de9b44501647812f\"" Jul 15 11:34:10.055684 env[1204]: time="2025-07-15T11:34:10.055634862Z" level=info msg="StartContainer for \"51ddda6ab36d927853ed2d8f6f64450c3dd5bf28f727ff33de9b44501647812f\"" Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.034 [WARNING][4797] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--95cf67764--44khd-eth0", GenerateName:"calico-apiserver-95cf67764-", Namespace:"calico-apiserver", SelfLink:"", UID:"ad8aa757-a79e-4464-bdcb-025b9e566728", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"95cf67764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe", Pod:"calico-apiserver-95cf67764-44khd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali143544822d3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.034 [INFO][4797] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.035 [INFO][4797] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" iface="eth0" netns="" Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.035 [INFO][4797] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.035 [INFO][4797] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.061 [INFO][4806] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" HandleID="k8s-pod-network.af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.062 [INFO][4806] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.062 [INFO][4806] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.073 [WARNING][4806] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" HandleID="k8s-pod-network.af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.073 [INFO][4806] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" HandleID="k8s-pod-network.af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.075 [INFO][4806] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.082282 env[1204]: 2025-07-15 11:34:10.077 [INFO][4797] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:34:10.083246 env[1204]: time="2025-07-15T11:34:10.083148479Z" level=info msg="TearDown network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\" successfully" Jul 15 11:34:10.083246 env[1204]: time="2025-07-15T11:34:10.083219144Z" level=info msg="StopPodSandbox for \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\" returns successfully" Jul 15 11:34:10.083246 env[1204]: time="2025-07-15T11:34:10.083747934Z" level=info msg="RemovePodSandbox for \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\"" Jul 15 11:34:10.083246 env[1204]: time="2025-07-15T11:34:10.083791227Z" level=info msg="Forcibly stopping sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\"" Jul 15 11:34:10.086504 systemd[1]: run-containerd-runc-k8s.io-51ddda6ab36d927853ed2d8f6f64450c3dd5bf28f727ff33de9b44501647812f-runc.OQSl9K.mount: Deactivated successfully. Jul 15 11:34:10.091413 systemd[1]: Started cri-containerd-51ddda6ab36d927853ed2d8f6f64450c3dd5bf28f727ff33de9b44501647812f.scope. Jul 15 11:34:10.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit: BPF prog-id=224 op=LOAD Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4412 pid=4821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:10.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646464613661623336643932373835336564326438663666363434 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4412 pid=4821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:10.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646464613661623336643932373835336564326438663666363434 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit: BPF prog-id=225 op=LOAD Jul 15 11:34:10.105000 audit[4821]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001df4e0 items=0 ppid=4412 pid=4821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:10.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646464613661623336643932373835336564326438663666363434 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.105000 audit: BPF prog-id=226 op=LOAD Jul 15 11:34:10.105000 audit[4821]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001df528 items=0 ppid=4412 pid=4821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:10.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646464613661623336643932373835336564326438663666363434 Jul 15 11:34:10.105000 audit: BPF prog-id=226 op=UNLOAD Jul 15 11:34:10.105000 audit: BPF prog-id=225 op=UNLOAD Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { perfmon } for pid=4821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit[4821]: AVC avc: denied { bpf } for pid=4821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:10.106000 audit: BPF prog-id=227 op=LOAD Jul 15 11:34:10.106000 audit[4821]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001df938 items=0 ppid=4412 pid=4821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:10.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646464613661623336643932373835336564326438663666363434 Jul 15 11:34:10.136689 env[1204]: time="2025-07-15T11:34:10.136632950Z" level=info msg="StartContainer for \"51ddda6ab36d927853ed2d8f6f64450c3dd5bf28f727ff33de9b44501647812f\" returns successfully" Jul 15 11:34:10.168607 kubelet[1945]: I0715 11:34:10.168546 1945 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:34:10.209358 kubelet[1945]: I0715 11:34:10.209307 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-rphg6" podStartSLOduration=30.054626205 podStartE2EDuration="44.209276446s" podCreationTimestamp="2025-07-15 11:33:26 +0000 UTC" firstStartedPulling="2025-07-15 11:33:55.876875191 +0000 UTC m=+47.596852100" lastFinishedPulling="2025-07-15 11:34:10.031525432 +0000 UTC m=+61.751502341" observedRunningTime="2025-07-15 11:34:10.188337063 +0000 UTC m=+61.908313972" watchObservedRunningTime="2025-07-15 11:34:10.209276446 +0000 UTC m=+61.929253355" Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.156 [WARNING][4848] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--95cf67764--44khd-eth0", GenerateName:"calico-apiserver-95cf67764-", Namespace:"calico-apiserver", SelfLink:"", UID:"ad8aa757-a79e-4464-bdcb-025b9e566728", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"95cf67764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"26b6bb4266c3a408cc19a1e1ab48f3ea31029034faba713ce15a9eacfb502fbe", Pod:"calico-apiserver-95cf67764-44khd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali143544822d3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.157 [INFO][4848] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.157 [INFO][4848] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" iface="eth0" netns="" Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.157 [INFO][4848] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.157 [INFO][4848] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.193 [INFO][4870] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" HandleID="k8s-pod-network.af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.193 [INFO][4870] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.193 [INFO][4870] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.208 [WARNING][4870] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" HandleID="k8s-pod-network.af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.208 [INFO][4870] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" HandleID="k8s-pod-network.af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Workload="localhost-k8s-calico--apiserver--95cf67764--44khd-eth0" Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.210 [INFO][4870] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.214091 env[1204]: 2025-07-15 11:34:10.211 [INFO][4848] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47" Jul 15 11:34:10.214923 env[1204]: time="2025-07-15T11:34:10.214121228Z" level=info msg="TearDown network for sandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\" successfully" Jul 15 11:34:10.312000 audit[4902]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4902 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:10.312000 audit[4902]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe80a0a8c0 a2=0 a3=7ffe80a0a8ac items=0 ppid=2067 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:10.312000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:10.316558 env[1204]: time="2025-07-15T11:34:10.316501292Z" level=info msg="RemovePodSandbox \"af267dee9208c0b1362342f6f02943a5e9fff7f03ceac2c905126fe7e2026b47\" returns successfully" Jul 15 11:34:10.317049 env[1204]: time="2025-07-15T11:34:10.317027325Z" level=info msg="StopPodSandbox for \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\"" Jul 15 11:34:10.317000 audit[4902]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4902 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:10.317000 audit[4902]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe80a0a8c0 a2=0 a3=7ffe80a0a8ac items=0 ppid=2067 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:10.317000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:10.331000 audit[4919]: NETFILTER_CFG table=filter:126 family=2 entries=11 op=nft_register_rule pid=4919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:10.331000 audit[4919]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe024cced0 a2=0 a3=7ffe024ccebc items=0 ppid=2067 pid=4919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:10.331000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:10.335000 audit[4919]: NETFILTER_CFG table=nat:127 family=2 entries=29 op=nft_register_chain pid=4919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:10.335000 audit[4919]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe024cced0 a2=0 a3=7ffe024ccebc items=0 ppid=2067 pid=4919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:10.335000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.352 [WARNING][4913] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0", GenerateName:"calico-kube-controllers-85f8d685bc-", Namespace:"calico-system", SelfLink:"", UID:"129c4ac3-7f2d-460d-8ef9-125b67850db7", ResourceVersion:"1156", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85f8d685bc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844", Pod:"calico-kube-controllers-85f8d685bc-zmqzr", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali65c88457d87", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.352 [INFO][4913] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.352 [INFO][4913] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" iface="eth0" netns="" Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.352 [INFO][4913] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.352 [INFO][4913] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.371 [INFO][4924] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" HandleID="k8s-pod-network.61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.371 [INFO][4924] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.371 [INFO][4924] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.377 [WARNING][4924] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" HandleID="k8s-pod-network.61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.377 [INFO][4924] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" HandleID="k8s-pod-network.61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.378 [INFO][4924] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.382347 env[1204]: 2025-07-15 11:34:10.380 [INFO][4913] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:34:10.382992 env[1204]: time="2025-07-15T11:34:10.382362473Z" level=info msg="TearDown network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\" successfully" Jul 15 11:34:10.382992 env[1204]: time="2025-07-15T11:34:10.382389777Z" level=info msg="StopPodSandbox for \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\" returns successfully" Jul 15 11:34:10.382992 env[1204]: time="2025-07-15T11:34:10.382648424Z" level=info msg="RemovePodSandbox for \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\"" Jul 15 11:34:10.382992 env[1204]: time="2025-07-15T11:34:10.382671469Z" level=info msg="Forcibly stopping sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\"" Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.416 [WARNING][4941] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0", GenerateName:"calico-kube-controllers-85f8d685bc-", Namespace:"calico-system", SelfLink:"", UID:"129c4ac3-7f2d-460d-8ef9-125b67850db7", ResourceVersion:"1156", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85f8d685bc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c19ee46ae698c7306451ce504946b5aecb46b6b643816620dd55d4c9284ee844", Pod:"calico-kube-controllers-85f8d685bc-zmqzr", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali65c88457d87", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.416 [INFO][4941] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.416 [INFO][4941] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" iface="eth0" netns="" Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.416 [INFO][4941] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.416 [INFO][4941] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.431 [INFO][4949] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" HandleID="k8s-pod-network.61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.431 [INFO][4949] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.431 [INFO][4949] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.437 [WARNING][4949] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" HandleID="k8s-pod-network.61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.437 [INFO][4949] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" HandleID="k8s-pod-network.61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Workload="localhost-k8s-calico--kube--controllers--85f8d685bc--zmqzr-eth0" Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.438 [INFO][4949] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.441939 env[1204]: 2025-07-15 11:34:10.440 [INFO][4941] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d" Jul 15 11:34:10.442429 env[1204]: time="2025-07-15T11:34:10.441953127Z" level=info msg="TearDown network for sandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\" successfully" Jul 15 11:34:10.445193 env[1204]: time="2025-07-15T11:34:10.445154934Z" level=info msg="RemovePodSandbox \"61bdc28c36c048d767953240515d55e5bd3e9011a3c1d01c2a608d1457f27e0d\" returns successfully" Jul 15 11:34:10.445714 env[1204]: time="2025-07-15T11:34:10.445679515Z" level=info msg="StopPodSandbox for \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\"" Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.475 [WARNING][4968] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--x72mh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"272bb4b0-cbde-4852-94b1-dcd2390d1612", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05", Pod:"coredns-668d6bf9bc-x72mh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic6a4159ae49", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.475 [INFO][4968] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.475 [INFO][4968] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" iface="eth0" netns="" Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.475 [INFO][4968] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.475 [INFO][4968] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.493 [INFO][4977] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" HandleID="k8s-pod-network.e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.493 [INFO][4977] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.493 [INFO][4977] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.498 [WARNING][4977] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" HandleID="k8s-pod-network.e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.498 [INFO][4977] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" HandleID="k8s-pod-network.e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.500 [INFO][4977] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.504006 env[1204]: 2025-07-15 11:34:10.502 [INFO][4968] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:34:10.504480 env[1204]: time="2025-07-15T11:34:10.504034899Z" level=info msg="TearDown network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\" successfully" Jul 15 11:34:10.504480 env[1204]: time="2025-07-15T11:34:10.504066970Z" level=info msg="StopPodSandbox for \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\" returns successfully" Jul 15 11:34:10.504628 env[1204]: time="2025-07-15T11:34:10.504584136Z" level=info msg="RemovePodSandbox for \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\"" Jul 15 11:34:10.504799 env[1204]: time="2025-07-15T11:34:10.504629353Z" level=info msg="Forcibly stopping sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\"" Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.535 [WARNING][4997] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--x72mh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"272bb4b0-cbde-4852-94b1-dcd2390d1612", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a841a824ca50a1023f0d591257afcd60f796f0b8e141de96808babb542627b05", Pod:"coredns-668d6bf9bc-x72mh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic6a4159ae49", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.535 [INFO][4997] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.535 [INFO][4997] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" iface="eth0" netns="" Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.535 [INFO][4997] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.535 [INFO][4997] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.553 [INFO][5006] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" HandleID="k8s-pod-network.e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.553 [INFO][5006] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.553 [INFO][5006] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.560 [WARNING][5006] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" HandleID="k8s-pod-network.e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.560 [INFO][5006] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" HandleID="k8s-pod-network.e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Workload="localhost-k8s-coredns--668d6bf9bc--x72mh-eth0" Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.562 [INFO][5006] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.566982 env[1204]: 2025-07-15 11:34:10.564 [INFO][4997] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c" Jul 15 11:34:10.566982 env[1204]: time="2025-07-15T11:34:10.566904187Z" level=info msg="TearDown network for sandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\" successfully" Jul 15 11:34:10.570284 env[1204]: time="2025-07-15T11:34:10.570257636Z" level=info msg="RemovePodSandbox \"e057e8b6417792fc4c95b86d0ac984c7aae173d2be8ae993b57949c273f8db8c\" returns successfully" Jul 15 11:34:10.570763 env[1204]: time="2025-07-15T11:34:10.570718074Z" level=info msg="StopPodSandbox for \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\"" Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.601 [WARNING][5025] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--rphg6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1", ResourceVersion:"1184", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21", Pod:"goldmane-768f4c5c69-rphg6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidbcc634583b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.602 [INFO][5025] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.602 [INFO][5025] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" iface="eth0" netns="" Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.602 [INFO][5025] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.602 [INFO][5025] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.619 [INFO][5035] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" HandleID="k8s-pod-network.cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.619 [INFO][5035] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.619 [INFO][5035] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.625 [WARNING][5035] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" HandleID="k8s-pod-network.cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.625 [INFO][5035] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" HandleID="k8s-pod-network.cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.626 [INFO][5035] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.630602 env[1204]: 2025-07-15 11:34:10.628 [INFO][5025] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:34:10.631356 env[1204]: time="2025-07-15T11:34:10.630627030Z" level=info msg="TearDown network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\" successfully" Jul 15 11:34:10.631356 env[1204]: time="2025-07-15T11:34:10.630659362Z" level=info msg="StopPodSandbox for \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\" returns successfully" Jul 15 11:34:10.631356 env[1204]: time="2025-07-15T11:34:10.631174494Z" level=info msg="RemovePodSandbox for \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\"" Jul 15 11:34:10.631356 env[1204]: time="2025-07-15T11:34:10.631225793Z" level=info msg="Forcibly stopping sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\"" Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.659 [WARNING][5052] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--rphg6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"96cc5b07-a2aa-4209-83e0-b3b0bd5789c1", ResourceVersion:"1184", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8c14c02eb39f701c8002fe56f10582f40df7eec583b0d9fffea92aaa4ed34a21", Pod:"goldmane-768f4c5c69-rphg6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidbcc634583b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.659 [INFO][5052] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.659 [INFO][5052] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" iface="eth0" netns="" Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.659 [INFO][5052] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.659 [INFO][5052] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.677 [INFO][5062] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" HandleID="k8s-pod-network.cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.677 [INFO][5062] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.677 [INFO][5062] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.683 [WARNING][5062] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" HandleID="k8s-pod-network.cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.683 [INFO][5062] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" HandleID="k8s-pod-network.cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Workload="localhost-k8s-goldmane--768f4c5c69--rphg6-eth0" Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.684 [INFO][5062] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.688353 env[1204]: 2025-07-15 11:34:10.686 [INFO][5052] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3" Jul 15 11:34:10.688831 env[1204]: time="2025-07-15T11:34:10.688362169Z" level=info msg="TearDown network for sandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\" successfully" Jul 15 11:34:10.691738 env[1204]: time="2025-07-15T11:34:10.691715227Z" level=info msg="RemovePodSandbox \"cb0a8fa5f98d5ea06df83728202bb42bf2f3e7b20495662c5c3793f85f86d7a3\" returns successfully" Jul 15 11:34:10.692219 env[1204]: time="2025-07-15T11:34:10.692197687Z" level=info msg="StopPodSandbox for \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\"" Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.719 [WARNING][5079] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f7hlf-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"99156ec4-9529-47f6-b199-77d30be5e101", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c", Pod:"csi-node-driver-f7hlf", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidc97345ec97", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.719 [INFO][5079] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.720 [INFO][5079] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" iface="eth0" netns="" Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.720 [INFO][5079] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.720 [INFO][5079] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.736 [INFO][5088] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" HandleID="k8s-pod-network.d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.736 [INFO][5088] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.736 [INFO][5088] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.744 [WARNING][5088] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" HandleID="k8s-pod-network.d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.744 [INFO][5088] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" HandleID="k8s-pod-network.d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.745 [INFO][5088] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.748466 env[1204]: 2025-07-15 11:34:10.746 [INFO][5079] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:34:10.748970 env[1204]: time="2025-07-15T11:34:10.748482973Z" level=info msg="TearDown network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\" successfully" Jul 15 11:34:10.748970 env[1204]: time="2025-07-15T11:34:10.748511058Z" level=info msg="StopPodSandbox for \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\" returns successfully" Jul 15 11:34:10.749053 env[1204]: time="2025-07-15T11:34:10.749015429Z" level=info msg="RemovePodSandbox for \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\"" Jul 15 11:34:10.749285 env[1204]: time="2025-07-15T11:34:10.749228209Z" level=info msg="Forcibly stopping sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\"" Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.779 [WARNING][5107] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f7hlf-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"99156ec4-9529-47f6-b199-77d30be5e101", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c", Pod:"csi-node-driver-f7hlf", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidc97345ec97", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.779 [INFO][5107] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.779 [INFO][5107] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" iface="eth0" netns="" Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.779 [INFO][5107] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.779 [INFO][5107] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.796 [INFO][5116] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" HandleID="k8s-pod-network.d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.796 [INFO][5116] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.796 [INFO][5116] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.802 [WARNING][5116] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" HandleID="k8s-pod-network.d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.802 [INFO][5116] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" HandleID="k8s-pod-network.d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Workload="localhost-k8s-csi--node--driver--f7hlf-eth0" Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.804 [INFO][5116] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.807597 env[1204]: 2025-07-15 11:34:10.805 [INFO][5107] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9" Jul 15 11:34:10.808141 env[1204]: time="2025-07-15T11:34:10.807616887Z" level=info msg="TearDown network for sandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\" successfully" Jul 15 11:34:10.811168 env[1204]: time="2025-07-15T11:34:10.811133671Z" level=info msg="RemovePodSandbox \"d0e28e8f160d57c5549e36351b25d372f1f7651f91733c8934773d03e135d7c9\" returns successfully" Jul 15 11:34:10.811710 env[1204]: time="2025-07-15T11:34:10.811677449Z" level=info msg="StopPodSandbox for \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\"" Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.839 [WARNING][5134] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--95cf67764--w725p-eth0", GenerateName:"calico-apiserver-95cf67764-", Namespace:"calico-apiserver", SelfLink:"", UID:"3bc095c7-aa20-4cd8-bd19-7dafcdd859ff", ResourceVersion:"1123", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"95cf67764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9", Pod:"calico-apiserver-95cf67764-w725p", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia7fa74b0642", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.840 [INFO][5134] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.840 [INFO][5134] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" iface="eth0" netns="" Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.840 [INFO][5134] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.840 [INFO][5134] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.857 [INFO][5142] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" HandleID="k8s-pod-network.44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.857 [INFO][5142] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.857 [INFO][5142] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.863 [WARNING][5142] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" HandleID="k8s-pod-network.44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.863 [INFO][5142] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" HandleID="k8s-pod-network.44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.864 [INFO][5142] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.868108 env[1204]: 2025-07-15 11:34:10.866 [INFO][5134] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:34:10.868108 env[1204]: time="2025-07-15T11:34:10.868065222Z" level=info msg="TearDown network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\" successfully" Jul 15 11:34:10.868696 env[1204]: time="2025-07-15T11:34:10.868105470Z" level=info msg="StopPodSandbox for \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\" returns successfully" Jul 15 11:34:10.868696 env[1204]: time="2025-07-15T11:34:10.868671871Z" level=info msg="RemovePodSandbox for \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\"" Jul 15 11:34:10.868766 env[1204]: time="2025-07-15T11:34:10.868701278Z" level=info msg="Forcibly stopping sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\"" Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.898 [WARNING][5160] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--95cf67764--w725p-eth0", GenerateName:"calico-apiserver-95cf67764-", Namespace:"calico-apiserver", SelfLink:"", UID:"3bc095c7-aa20-4cd8-bd19-7dafcdd859ff", ResourceVersion:"1123", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 33, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"95cf67764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee4b8e6e0ee650892c36f93cacd37a2f66e3d853e0ad60e0c8a4f26d4c6daef9", Pod:"calico-apiserver-95cf67764-w725p", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia7fa74b0642", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.898 [INFO][5160] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.898 [INFO][5160] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" iface="eth0" netns="" Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.898 [INFO][5160] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.898 [INFO][5160] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.914 [INFO][5169] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" HandleID="k8s-pod-network.44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.914 [INFO][5169] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.914 [INFO][5169] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.919 [WARNING][5169] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" HandleID="k8s-pod-network.44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.919 [INFO][5169] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" HandleID="k8s-pod-network.44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Workload="localhost-k8s-calico--apiserver--95cf67764--w725p-eth0" Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.920 [INFO][5169] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.924736 env[1204]: 2025-07-15 11:34:10.922 [INFO][5160] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d" Jul 15 11:34:10.925634 env[1204]: time="2025-07-15T11:34:10.924772021Z" level=info msg="TearDown network for sandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\" successfully" Jul 15 11:34:10.928564 env[1204]: time="2025-07-15T11:34:10.928531763Z" level=info msg="RemovePodSandbox \"44a2b0d845a00f847d7c65772c42fd8aa19bb7a97932107753e8864274ed200d\" returns successfully" Jul 15 11:34:10.929089 env[1204]: time="2025-07-15T11:34:10.929062145Z" level=info msg="StopPodSandbox for \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\"" Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.956 [WARNING][5186] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" WorkloadEndpoint="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.957 [INFO][5186] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.957 [INFO][5186] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" iface="eth0" netns="" Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.957 [INFO][5186] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.957 [INFO][5186] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.974 [INFO][5196] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" HandleID="k8s-pod-network.b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Workload="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.974 [INFO][5196] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.974 [INFO][5196] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.980 [WARNING][5196] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" HandleID="k8s-pod-network.b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Workload="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.980 [INFO][5196] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" HandleID="k8s-pod-network.b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Workload="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.982 [INFO][5196] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:10.985365 env[1204]: 2025-07-15 11:34:10.983 [INFO][5186] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:34:10.985898 env[1204]: time="2025-07-15T11:34:10.985396686Z" level=info msg="TearDown network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\" successfully" Jul 15 11:34:10.985898 env[1204]: time="2025-07-15T11:34:10.985431463Z" level=info msg="StopPodSandbox for \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\" returns successfully" Jul 15 11:34:10.985972 env[1204]: time="2025-07-15T11:34:10.985892691Z" level=info msg="RemovePodSandbox for \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\"" Jul 15 11:34:10.985972 env[1204]: time="2025-07-15T11:34:10.985933470Z" level=info msg="Forcibly stopping sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\"" Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.016 [WARNING][5214] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" WorkloadEndpoint="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.017 [INFO][5214] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.017 [INFO][5214] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" iface="eth0" netns="" Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.017 [INFO][5214] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.017 [INFO][5214] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.037 [INFO][5223] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" HandleID="k8s-pod-network.b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Workload="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.037 [INFO][5223] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.037 [INFO][5223] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.045 [WARNING][5223] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" HandleID="k8s-pod-network.b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Workload="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.045 [INFO][5223] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" HandleID="k8s-pod-network.b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Workload="localhost-k8s-whisker--7d9f85f7fc--d2ztr-eth0" Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.046 [INFO][5223] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:11.049978 env[1204]: 2025-07-15 11:34:11.048 [INFO][5214] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b" Jul 15 11:34:11.050544 env[1204]: time="2025-07-15T11:34:11.050009075Z" level=info msg="TearDown network for sandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\" successfully" Jul 15 11:34:11.053272 env[1204]: time="2025-07-15T11:34:11.053235405Z" level=info msg="RemovePodSandbox \"b80ffb21ad08252c240b5e7779f48dbf5ebc5dae12a7c31dac67edf3068af90b\" returns successfully" Jul 15 11:34:11.657914 env[1204]: time="2025-07-15T11:34:11.657862761Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:11.659999 env[1204]: time="2025-07-15T11:34:11.659954397Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:11.661584 env[1204]: time="2025-07-15T11:34:11.661532033Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:11.663033 env[1204]: time="2025-07-15T11:34:11.662996923Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:34:11.663517 env[1204]: time="2025-07-15T11:34:11.663476957Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 15 11:34:11.665804 env[1204]: time="2025-07-15T11:34:11.665776404Z" level=info msg="CreateContainer within sandbox \"c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:34:11.677981 env[1204]: time="2025-07-15T11:34:11.677409676Z" level=info msg="CreateContainer within sandbox \"c4853589dc6a7623019ee7dab64a79cf7481092b3b6c1add474e91c7f889398c\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"afc25d00a10c68e69b14377ba847f3b25f475ea6f32917759e1b9d300a90b9c3\"" Jul 15 11:34:11.678417 env[1204]: time="2025-07-15T11:34:11.678389612Z" level=info msg="StartContainer for \"afc25d00a10c68e69b14377ba847f3b25f475ea6f32917759e1b9d300a90b9c3\"" Jul 15 11:34:11.696123 systemd[1]: Started cri-containerd-afc25d00a10c68e69b14377ba847f3b25f475ea6f32917759e1b9d300a90b9c3.scope. Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f5ca82cbb18 items=0 ppid=3671 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:11.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166633235643030613130633638653639623134333737626138343766 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit: BPF prog-id=228 op=LOAD Jul 15 11:34:11.709000 audit[5261]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c00028b3e8 items=0 ppid=3671 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:11.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166633235643030613130633638653639623134333737626138343766 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit: BPF prog-id=229 op=LOAD Jul 15 11:34:11.709000 audit[5261]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c00028b438 items=0 ppid=3671 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:11.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166633235643030613130633638653639623134333737626138343766 Jul 15 11:34:11.709000 audit: BPF prog-id=229 op=UNLOAD Jul 15 11:34:11.709000 audit: BPF prog-id=228 op=UNLOAD Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:34:11.709000 audit: BPF prog-id=230 op=LOAD Jul 15 11:34:11.709000 audit[5261]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c00028b4c8 items=0 ppid=3671 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:11.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166633235643030613130633638653639623134333737626138343766 Jul 15 11:34:11.722654 env[1204]: time="2025-07-15T11:34:11.722613184Z" level=info msg="StartContainer for \"afc25d00a10c68e69b14377ba847f3b25f475ea6f32917759e1b9d300a90b9c3\" returns successfully" Jul 15 11:34:12.646852 kubelet[1945]: I0715 11:34:12.646792 1945 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:34:12.646852 kubelet[1945]: I0715 11:34:12.646848 1945 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:34:13.565925 systemd[1]: Started sshd@14-10.0.0.90:22-10.0.0.1:35252.service. Jul 15 11:34:13.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.90:22-10.0.0.1:35252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:13.567163 kernel: kauditd_printk_skb: 125 callbacks suppressed Jul 15 11:34:13.567235 kernel: audit: type=1130 audit(1752579253.565:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.90:22-10.0.0.1:35252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:13.600000 audit[5313]: USER_ACCT pid=5313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.601149 sshd[5313]: Accepted publickey for core from 10.0.0.1 port 35252 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:13.602930 sshd[5313]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:13.602000 audit[5313]: CRED_ACQ pid=5313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.607947 systemd-logind[1197]: New session 15 of user core. Jul 15 11:34:13.608441 kernel: audit: type=1101 audit(1752579253.600:1506): pid=5313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.608467 kernel: audit: type=1103 audit(1752579253.602:1507): pid=5313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.608685 kernel: audit: type=1006 audit(1752579253.602:1508): pid=5313 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:34:13.608842 systemd[1]: Started session-15.scope. Jul 15 11:34:13.602000 audit[5313]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2332b480 a2=3 a3=0 items=0 ppid=1 pid=5313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:13.614536 kernel: audit: type=1300 audit(1752579253.602:1508): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2332b480 a2=3 a3=0 items=0 ppid=1 pid=5313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:13.614568 kernel: audit: type=1327 audit(1752579253.602:1508): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:13.602000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:13.613000 audit[5313]: USER_START pid=5313 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.619838 kernel: audit: type=1105 audit(1752579253.613:1509): pid=5313 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.619900 kernel: audit: type=1103 audit(1752579253.614:1510): pid=5315 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.614000 audit[5315]: CRED_ACQ pid=5315 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.903972 sshd[5313]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:13.904000 audit[5313]: USER_END pid=5313 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.906213 systemd[1]: sshd@14-10.0.0.90:22-10.0.0.1:35252.service: Deactivated successfully. Jul 15 11:34:13.907102 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:34:13.907780 systemd-logind[1197]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:34:13.908582 systemd-logind[1197]: Removed session 15. Jul 15 11:34:13.904000 audit[5313]: CRED_DISP pid=5313 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.912722 kernel: audit: type=1106 audit(1752579253.904:1511): pid=5313 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.912841 kernel: audit: type=1104 audit(1752579253.904:1512): pid=5313 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:13.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.90:22-10.0.0.1:35252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:18.908895 systemd[1]: Started sshd@15-10.0.0.90:22-10.0.0.1:48412.service. Jul 15 11:34:18.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.90:22-10.0.0.1:48412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:18.910042 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:34:18.910090 kernel: audit: type=1130 audit(1752579258.907:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.90:22-10.0.0.1:48412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:18.941000 audit[5335]: USER_ACCT pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:18.942554 sshd[5335]: Accepted publickey for core from 10.0.0.1 port 48412 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:18.944681 sshd[5335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:18.943000 audit[5335]: CRED_ACQ pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:18.947891 systemd-logind[1197]: New session 16 of user core. Jul 15 11:34:18.948818 systemd[1]: Started session-16.scope. Jul 15 11:34:18.951547 kernel: audit: type=1101 audit(1752579258.941:1515): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:18.951610 kernel: audit: type=1103 audit(1752579258.943:1516): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:18.951632 kernel: audit: type=1006 audit(1752579258.943:1517): pid=5335 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 15 11:34:18.943000 audit[5335]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe83c76760 a2=3 a3=0 items=0 ppid=1 pid=5335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:18.958096 kernel: audit: type=1300 audit(1752579258.943:1517): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe83c76760 a2=3 a3=0 items=0 ppid=1 pid=5335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:18.958147 kernel: audit: type=1327 audit(1752579258.943:1517): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:18.943000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:18.952000 audit[5335]: USER_START pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:18.963490 kernel: audit: type=1105 audit(1752579258.952:1518): pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:18.963536 kernel: audit: type=1103 audit(1752579258.953:1519): pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:18.953000 audit[5337]: CRED_ACQ pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:19.074032 sshd[5335]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:19.074000 audit[5335]: USER_END pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:19.076858 systemd-logind[1197]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:34:19.077195 systemd[1]: sshd@15-10.0.0.90:22-10.0.0.1:48412.service: Deactivated successfully. Jul 15 11:34:19.077976 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:34:19.078651 systemd-logind[1197]: Removed session 16. Jul 15 11:34:19.074000 audit[5335]: CRED_DISP pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:19.083965 kernel: audit: type=1106 audit(1752579259.074:1520): pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:19.084043 kernel: audit: type=1104 audit(1752579259.074:1521): pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:19.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.90:22-10.0.0.1:48412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:19.157115 kubelet[1945]: I0715 11:34:19.157045 1945 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-f7hlf" podStartSLOduration=32.091139825 podStartE2EDuration="52.157024995s" podCreationTimestamp="2025-07-15 11:33:27 +0000 UTC" firstStartedPulling="2025-07-15 11:33:51.598565702 +0000 UTC m=+43.318542611" lastFinishedPulling="2025-07-15 11:34:11.664450872 +0000 UTC m=+63.384427781" observedRunningTime="2025-07-15 11:34:12.212123068 +0000 UTC m=+63.932099977" watchObservedRunningTime="2025-07-15 11:34:19.157024995 +0000 UTC m=+70.877001934" Jul 15 11:34:24.078575 systemd[1]: Started sshd@16-10.0.0.90:22-10.0.0.1:48422.service. Jul 15 11:34:24.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.90:22-10.0.0.1:48422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:24.079648 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:34:24.079799 kernel: audit: type=1130 audit(1752579264.077:1523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.90:22-10.0.0.1:48422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:24.110000 audit[5372]: USER_ACCT pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.111865 sshd[5372]: Accepted publickey for core from 10.0.0.1 port 48422 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:24.112847 sshd[5372]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:24.111000 audit[5372]: CRED_ACQ pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.118310 systemd-logind[1197]: New session 17 of user core. Jul 15 11:34:24.118809 kernel: audit: type=1101 audit(1752579264.110:1524): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.118835 kernel: audit: type=1103 audit(1752579264.111:1525): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.118854 kernel: audit: type=1006 audit(1752579264.111:1526): pid=5372 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 15 11:34:24.119109 systemd[1]: Started session-17.scope. Jul 15 11:34:24.120956 kernel: audit: type=1300 audit(1752579264.111:1526): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef5a7cab0 a2=3 a3=0 items=0 ppid=1 pid=5372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:24.111000 audit[5372]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef5a7cab0 a2=3 a3=0 items=0 ppid=1 pid=5372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:24.124696 kernel: audit: type=1327 audit(1752579264.111:1526): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:24.111000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:24.125942 kernel: audit: type=1105 audit(1752579264.121:1527): pid=5372 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.121000 audit[5372]: USER_START pid=5372 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.129936 kernel: audit: type=1103 audit(1752579264.123:1528): pid=5374 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.123000 audit[5374]: CRED_ACQ pid=5374 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.245073 sshd[5372]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:24.244000 audit[5372]: USER_END pid=5372 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.247534 systemd[1]: sshd@16-10.0.0.90:22-10.0.0.1:48422.service: Deactivated successfully. Jul 15 11:34:24.248058 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:34:24.248605 systemd-logind[1197]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:34:24.249482 systemd[1]: Started sshd@17-10.0.0.90:22-10.0.0.1:48434.service. Jul 15 11:34:24.244000 audit[5372]: CRED_DISP pid=5372 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.250778 systemd-logind[1197]: Removed session 17. Jul 15 11:34:24.253890 kernel: audit: type=1106 audit(1752579264.244:1529): pid=5372 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.254144 kernel: audit: type=1104 audit(1752579264.244:1530): pid=5372 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.90:22-10.0.0.1:48422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:24.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.90:22-10.0.0.1:48434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:24.277000 audit[5385]: USER_ACCT pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.279115 sshd[5385]: Accepted publickey for core from 10.0.0.1 port 48434 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:24.278000 audit[5385]: CRED_ACQ pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.278000 audit[5385]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd07bfa490 a2=3 a3=0 items=0 ppid=1 pid=5385 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:24.278000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:24.280150 sshd[5385]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:24.283377 systemd-logind[1197]: New session 18 of user core. Jul 15 11:34:24.284155 systemd[1]: Started session-18.scope. Jul 15 11:34:24.286000 audit[5385]: USER_START pid=5385 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.287000 audit[5387]: CRED_ACQ pid=5387 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.594069 sshd[5385]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:24.593000 audit[5385]: USER_END pid=5385 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.594000 audit[5385]: CRED_DISP pid=5385 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.597033 systemd[1]: sshd@17-10.0.0.90:22-10.0.0.1:48434.service: Deactivated successfully. Jul 15 11:34:24.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.90:22-10.0.0.1:48434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:24.597532 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:34:24.598028 systemd-logind[1197]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:34:24.599034 systemd[1]: Started sshd@18-10.0.0.90:22-10.0.0.1:48450.service. Jul 15 11:34:24.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.90:22-10.0.0.1:48450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:24.599626 systemd-logind[1197]: Removed session 18. Jul 15 11:34:24.629000 audit[5397]: USER_ACCT pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.630616 sshd[5397]: Accepted publickey for core from 10.0.0.1 port 48450 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:24.630000 audit[5397]: CRED_ACQ pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.630000 audit[5397]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf44d0410 a2=3 a3=0 items=0 ppid=1 pid=5397 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:24.630000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:24.631720 sshd[5397]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:24.634880 systemd-logind[1197]: New session 19 of user core. Jul 15 11:34:24.635883 systemd[1]: Started session-19.scope. Jul 15 11:34:24.638000 audit[5397]: USER_START pid=5397 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:24.640000 audit[5399]: CRED_ACQ pid=5399 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.350000 audit[5413]: NETFILTER_CFG table=filter:128 family=2 entries=22 op=nft_register_rule pid=5413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:25.350000 audit[5413]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc02030150 a2=0 a3=7ffc0203013c items=0 ppid=2067 pid=5413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:25.350000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:25.356000 audit[5413]: NETFILTER_CFG table=nat:129 family=2 entries=24 op=nft_register_rule pid=5413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:25.356000 audit[5413]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc02030150 a2=0 a3=0 items=0 ppid=2067 pid=5413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:25.356000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:25.368908 sshd[5397]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:25.369000 audit[5397]: USER_END pid=5397 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.369000 audit[5397]: CRED_DISP pid=5397 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.90:22-10.0.0.1:48466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:25.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.90:22-10.0.0.1:48450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:25.371713 systemd[1]: Started sshd@19-10.0.0.90:22-10.0.0.1:48466.service. Jul 15 11:34:25.372228 systemd[1]: sshd@18-10.0.0.90:22-10.0.0.1:48450.service: Deactivated successfully. Jul 15 11:34:25.372768 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:34:25.374125 systemd-logind[1197]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:34:25.375419 systemd-logind[1197]: Removed session 19. Jul 15 11:34:25.379000 audit[5419]: NETFILTER_CFG table=filter:130 family=2 entries=34 op=nft_register_rule pid=5419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:25.379000 audit[5419]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc7dd36990 a2=0 a3=7ffc7dd3697c items=0 ppid=2067 pid=5419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:25.379000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:25.387000 audit[5419]: NETFILTER_CFG table=nat:131 family=2 entries=24 op=nft_register_rule pid=5419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:25.387000 audit[5419]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc7dd36990 a2=0 a3=0 items=0 ppid=2067 pid=5419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:25.387000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:25.405000 audit[5416]: USER_ACCT pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.407015 sshd[5416]: Accepted publickey for core from 10.0.0.1 port 48466 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:25.406000 audit[5416]: CRED_ACQ pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.406000 audit[5416]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff52ac200 a2=3 a3=0 items=0 ppid=1 pid=5416 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:25.406000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:25.408523 sshd[5416]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:25.411891 systemd-logind[1197]: New session 20 of user core. Jul 15 11:34:25.412615 systemd[1]: Started session-20.scope. Jul 15 11:34:25.415000 audit[5416]: USER_START pid=5416 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.416000 audit[5422]: CRED_ACQ pid=5422 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.761148 sshd[5416]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:25.760000 audit[5416]: USER_END pid=5416 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.761000 audit[5416]: CRED_DISP pid=5416 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.764040 systemd[1]: sshd@19-10.0.0.90:22-10.0.0.1:48466.service: Deactivated successfully. Jul 15 11:34:25.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.90:22-10.0.0.1:48466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:25.764596 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:34:25.765110 systemd-logind[1197]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:34:25.766473 systemd[1]: Started sshd@20-10.0.0.90:22-10.0.0.1:48470.service. Jul 15 11:34:25.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.90:22-10.0.0.1:48470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:25.767254 systemd-logind[1197]: Removed session 20. Jul 15 11:34:25.793000 audit[5432]: USER_ACCT pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.795160 sshd[5432]: Accepted publickey for core from 10.0.0.1 port 48470 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:25.794000 audit[5432]: CRED_ACQ pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.794000 audit[5432]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc369fa9d0 a2=3 a3=0 items=0 ppid=1 pid=5432 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:25.794000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:25.796204 sshd[5432]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:25.799386 systemd-logind[1197]: New session 21 of user core. Jul 15 11:34:25.800137 systemd[1]: Started session-21.scope. Jul 15 11:34:25.802000 audit[5432]: USER_START pid=5432 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.803000 audit[5434]: CRED_ACQ pid=5434 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.909745 sshd[5432]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:25.909000 audit[5432]: USER_END pid=5432 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.909000 audit[5432]: CRED_DISP pid=5432 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:25.912496 systemd[1]: sshd@20-10.0.0.90:22-10.0.0.1:48470.service: Deactivated successfully. Jul 15 11:34:25.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.90:22-10.0.0.1:48470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:25.913371 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:34:25.914228 systemd-logind[1197]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:34:25.914925 systemd-logind[1197]: Removed session 21. Jul 15 11:34:26.859373 kubelet[1945]: I0715 11:34:26.859294 1945 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:34:26.889000 audit[5446]: NETFILTER_CFG table=filter:132 family=2 entries=34 op=nft_register_rule pid=5446 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:26.889000 audit[5446]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc7650dc30 a2=0 a3=7ffc7650dc1c items=0 ppid=2067 pid=5446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:26.889000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:26.893000 audit[5446]: NETFILTER_CFG table=nat:133 family=2 entries=36 op=nft_register_chain pid=5446 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:26.893000 audit[5446]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffc7650dc30 a2=0 a3=7ffc7650dc1c items=0 ppid=2067 pid=5446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:26.893000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:30.914293 systemd[1]: Started sshd@21-10.0.0.90:22-10.0.0.1:51432.service. Jul 15 11:34:30.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.90:22-10.0.0.1:51432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:30.915502 kernel: kauditd_printk_skb: 63 callbacks suppressed Jul 15 11:34:30.915790 kernel: audit: type=1130 audit(1752579270.913:1574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.90:22-10.0.0.1:51432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:30.946000 audit[5454]: USER_ACCT pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:30.948153 sshd[5454]: Accepted publickey for core from 10.0.0.1 port 51432 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:30.949394 sshd[5454]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:30.947000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:30.952852 systemd-logind[1197]: New session 22 of user core. Jul 15 11:34:30.956725 kernel: audit: type=1101 audit(1752579270.946:1575): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:30.956753 kernel: audit: type=1103 audit(1752579270.947:1576): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:30.956778 kernel: audit: type=1006 audit(1752579270.947:1577): pid=5454 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 15 11:34:30.953609 systemd[1]: Started session-22.scope. Jul 15 11:34:30.947000 audit[5454]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffceb92c940 a2=3 a3=0 items=0 ppid=1 pid=5454 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:30.963748 kernel: audit: type=1300 audit(1752579270.947:1577): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffceb92c940 a2=3 a3=0 items=0 ppid=1 pid=5454 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:30.963792 kernel: audit: type=1327 audit(1752579270.947:1577): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:30.947000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:30.965251 kernel: audit: type=1105 audit(1752579270.957:1578): pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:30.957000 audit[5454]: USER_START pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:30.969607 kernel: audit: type=1103 audit(1752579270.958:1579): pid=5456 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:30.958000 audit[5456]: CRED_ACQ pid=5456 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:31.130090 sshd[5454]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:31.129000 audit[5454]: USER_END pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:31.132808 systemd[1]: sshd@21-10.0.0.90:22-10.0.0.1:51432.service: Deactivated successfully. Jul 15 11:34:31.133563 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:34:31.134324 systemd-logind[1197]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:34:31.135047 systemd-logind[1197]: Removed session 22. Jul 15 11:34:31.129000 audit[5454]: CRED_DISP pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:31.138535 kernel: audit: type=1106 audit(1752579271.129:1580): pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:31.138596 kernel: audit: type=1104 audit(1752579271.129:1581): pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:31.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.90:22-10.0.0.1:51432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:31.345000 audit[5468]: NETFILTER_CFG table=filter:134 family=2 entries=22 op=nft_register_rule pid=5468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:31.345000 audit[5468]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd39fe47b0 a2=0 a3=7ffd39fe479c items=0 ppid=2067 pid=5468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:31.345000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:31.350000 audit[5468]: NETFILTER_CFG table=nat:135 family=2 entries=108 op=nft_register_chain pid=5468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:31.350000 audit[5468]: SYSCALL arch=c000003e syscall=46 success=yes exit=50220 a0=3 a1=7ffd39fe47b0 a2=0 a3=7ffd39fe479c items=0 ppid=2067 pid=5468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:31.350000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:32.372878 kubelet[1945]: E0715 11:34:32.372839 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:34:36.135116 systemd[1]: Started sshd@22-10.0.0.90:22-10.0.0.1:51444.service. Jul 15 11:34:36.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.90:22-10.0.0.1:51444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:36.136731 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:34:36.136794 kernel: audit: type=1130 audit(1752579276.134:1585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.90:22-10.0.0.1:51444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:36.173998 kernel: audit: type=1101 audit(1752579276.163:1586): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.174145 kernel: audit: type=1103 audit(1752579276.168:1587): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.163000 audit[5472]: USER_ACCT pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.180292 kernel: audit: type=1006 audit(1752579276.168:1588): pid=5472 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 15 11:34:36.180322 kernel: audit: type=1300 audit(1752579276.168:1588): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6604b4a0 a2=3 a3=0 items=0 ppid=1 pid=5472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:36.168000 audit[5472]: CRED_ACQ pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.168000 audit[5472]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6604b4a0 a2=3 a3=0 items=0 ppid=1 pid=5472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:36.180460 sshd[5472]: Accepted publickey for core from 10.0.0.1 port 51444 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:36.168000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:36.169897 sshd[5472]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:36.182304 kernel: audit: type=1327 audit(1752579276.168:1588): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:36.173796 systemd-logind[1197]: New session 23 of user core. Jul 15 11:34:36.174232 systemd[1]: Started session-23.scope. Jul 15 11:34:36.177000 audit[5472]: USER_START pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.190494 kernel: audit: type=1105 audit(1752579276.177:1589): pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.190563 kernel: audit: type=1103 audit(1752579276.178:1590): pid=5490 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.178000 audit[5490]: CRED_ACQ pid=5490 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.400204 sshd[5472]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:36.400000 audit[5472]: USER_END pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.403307 systemd[1]: sshd@22-10.0.0.90:22-10.0.0.1:51444.service: Deactivated successfully. Jul 15 11:34:36.404056 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:34:36.404697 systemd-logind[1197]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:34:36.405725 systemd-logind[1197]: Removed session 23. Jul 15 11:34:36.400000 audit[5472]: CRED_DISP pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.409753 kernel: audit: type=1106 audit(1752579276.400:1591): pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.409837 kernel: audit: type=1104 audit(1752579276.400:1592): pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:36.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.90:22-10.0.0.1:51444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:39.371520 kubelet[1945]: E0715 11:34:39.371477 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:34:39.371520 kubelet[1945]: E0715 11:34:39.371520 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:34:41.404600 systemd[1]: Started sshd@23-10.0.0.90:22-10.0.0.1:54636.service. Jul 15 11:34:41.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.90:22-10.0.0.1:54636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:41.405614 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:34:41.405677 kernel: audit: type=1130 audit(1752579281.404:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.90:22-10.0.0.1:54636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:41.437000 audit[5505]: USER_ACCT pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.438132 sshd[5505]: Accepted publickey for core from 10.0.0.1 port 54636 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:41.439827 sshd[5505]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:41.439000 audit[5505]: CRED_ACQ pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.445147 kernel: audit: type=1101 audit(1752579281.437:1595): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.445421 kernel: audit: type=1103 audit(1752579281.439:1596): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.445480 kernel: audit: type=1006 audit(1752579281.439:1597): pid=5505 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 15 11:34:41.444835 systemd-logind[1197]: New session 24 of user core. Jul 15 11:34:41.445798 systemd[1]: Started session-24.scope. Jul 15 11:34:41.447473 kernel: audit: type=1300 audit(1752579281.439:1597): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcce9efc0 a2=3 a3=0 items=0 ppid=1 pid=5505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:41.439000 audit[5505]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcce9efc0 a2=3 a3=0 items=0 ppid=1 pid=5505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:41.439000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:41.452569 kernel: audit: type=1327 audit(1752579281.439:1597): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:41.452620 kernel: audit: type=1105 audit(1752579281.450:1598): pid=5505 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.450000 audit[5505]: USER_START pid=5505 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.456670 kernel: audit: type=1103 audit(1752579281.451:1599): pid=5507 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.451000 audit[5507]: CRED_ACQ pid=5507 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.562208 sshd[5505]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:41.562000 audit[5505]: USER_END pid=5505 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.564742 systemd[1]: sshd@23-10.0.0.90:22-10.0.0.1:54636.service: Deactivated successfully. Jul 15 11:34:41.565517 systemd[1]: session-24.scope: Deactivated successfully. Jul 15 11:34:41.563000 audit[5505]: CRED_DISP pid=5505 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.568744 systemd-logind[1197]: Session 24 logged out. Waiting for processes to exit. Jul 15 11:34:41.569401 systemd-logind[1197]: Removed session 24. Jul 15 11:34:41.570775 kernel: audit: type=1106 audit(1752579281.562:1600): pid=5505 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.570844 kernel: audit: type=1104 audit(1752579281.563:1601): pid=5505 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:41.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.90:22-10.0.0.1:54636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:42.281000 audit[5540]: NETFILTER_CFG table=filter:136 family=2 entries=9 op=nft_register_rule pid=5540 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:42.281000 audit[5540]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcc39c72a0 a2=0 a3=7ffcc39c728c items=0 ppid=2067 pid=5540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:42.281000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:42.288000 audit[5540]: NETFILTER_CFG table=nat:137 family=2 entries=55 op=nft_register_chain pid=5540 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:34:42.288000 audit[5540]: SYSCALL arch=c000003e syscall=46 success=yes exit=20100 a0=3 a1=7ffcc39c72a0 a2=0 a3=7ffcc39c728c items=0 ppid=2067 pid=5540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:42.288000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:34:42.371877 kubelet[1945]: E0715 11:34:42.371829 1945 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:34:46.566782 systemd[1]: Started sshd@24-10.0.0.90:22-10.0.0.1:54648.service. Jul 15 11:34:46.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.90:22-10.0.0.1:54648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:46.567763 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:34:46.567812 kernel: audit: type=1130 audit(1752579286.565:1605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.90:22-10.0.0.1:54648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:46.599003 update_engine[1198]: I0715 11:34:46.598826 1198 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Jul 15 11:34:46.599003 update_engine[1198]: I0715 11:34:46.598994 1198 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Jul 15 11:34:46.599589 update_engine[1198]: I0715 11:34:46.599570 1198 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Jul 15 11:34:46.600080 update_engine[1198]: I0715 11:34:46.600039 1198 omaha_request_params.cc:62] Current group set to lts Jul 15 11:34:46.601000 audit[5545]: USER_ACCT pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.601799 sshd[5545]: Accepted publickey for core from 10.0.0.1 port 54648 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:34:46.602009 update_engine[1198]: I0715 11:34:46.601871 1198 update_attempter.cc:499] Already updated boot flags. Skipping. Jul 15 11:34:46.602009 update_engine[1198]: I0715 11:34:46.601887 1198 update_attempter.cc:643] Scheduling an action processor start. Jul 15 11:34:46.602213 update_engine[1198]: I0715 11:34:46.602164 1198 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 15 11:34:46.602595 update_engine[1198]: I0715 11:34:46.602571 1198 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Jul 15 11:34:46.602659 update_engine[1198]: I0715 11:34:46.602653 1198 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 15 11:34:46.602659 update_engine[1198]: I0715 11:34:46.602658 1198 omaha_request_action.cc:271] Request: Jul 15 11:34:46.602659 update_engine[1198]: Jul 15 11:34:46.602659 update_engine[1198]: Jul 15 11:34:46.602659 update_engine[1198]: Jul 15 11:34:46.602659 update_engine[1198]: Jul 15 11:34:46.602659 update_engine[1198]: Jul 15 11:34:46.602659 update_engine[1198]: Jul 15 11:34:46.602659 update_engine[1198]: Jul 15 11:34:46.602659 update_engine[1198]: Jul 15 11:34:46.602992 update_engine[1198]: I0715 11:34:46.602662 1198 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 15 11:34:46.605129 update_engine[1198]: I0715 11:34:46.605108 1198 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 15 11:34:46.605558 update_engine[1198]: I0715 11:34:46.605543 1198 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Jul 15 11:34:46.605000 audit[5545]: CRED_ACQ pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.606512 sshd[5545]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:46.611478 kernel: audit: type=1101 audit(1752579286.601:1606): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.611567 kernel: audit: type=1103 audit(1752579286.605:1607): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.611593 kernel: audit: type=1006 audit(1752579286.605:1608): pid=5545 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 15 11:34:46.605000 audit[5545]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3155e340 a2=3 a3=0 items=0 ppid=1 pid=5545 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:46.613944 locksmithd[1218]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Jul 15 11:34:46.616826 kernel: audit: type=1300 audit(1752579286.605:1608): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3155e340 a2=3 a3=0 items=0 ppid=1 pid=5545 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:46.616885 kernel: audit: type=1327 audit(1752579286.605:1608): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:46.605000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:46.616954 update_engine[1198]: E0715 11:34:46.616873 1198 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 15 11:34:46.616954 update_engine[1198]: I0715 11:34:46.616936 1198 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Jul 15 11:34:46.620027 systemd-logind[1197]: New session 25 of user core. Jul 15 11:34:46.620776 systemd[1]: Started session-25.scope. Jul 15 11:34:46.623000 audit[5545]: USER_START pid=5545 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.626000 audit[5547]: CRED_ACQ pid=5547 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.632144 kernel: audit: type=1105 audit(1752579286.623:1609): pid=5545 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.632224 kernel: audit: type=1103 audit(1752579286.626:1610): pid=5547 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.809253 sshd[5545]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:46.809000 audit[5545]: USER_END pid=5545 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.812491 systemd[1]: sshd@24-10.0.0.90:22-10.0.0.1:54648.service: Deactivated successfully. Jul 15 11:34:46.813263 systemd[1]: session-25.scope: Deactivated successfully. Jul 15 11:34:46.809000 audit[5545]: CRED_DISP pid=5545 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.816924 systemd-logind[1197]: Session 25 logged out. Waiting for processes to exit. Jul 15 11:34:46.817612 systemd-logind[1197]: Removed session 25. Jul 15 11:34:46.819532 kernel: audit: type=1106 audit(1752579286.809:1611): pid=5545 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.819583 kernel: audit: type=1104 audit(1752579286.809:1612): pid=5545 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:34:46.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.90:22-10.0.0.1:54648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'