Jul 15 11:30:44.983812 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Jul 15 10:04:37 -00 2025 Jul 15 11:30:44.983834 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:30:44.983845 kernel: BIOS-provided physical RAM map: Jul 15 11:30:44.983851 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 15 11:30:44.983856 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 15 11:30:44.983861 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 15 11:30:44.983868 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Jul 15 11:30:44.983874 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 15 11:30:44.983880 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 15 11:30:44.983887 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 15 11:30:44.983906 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Jul 15 11:30:44.983912 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 15 11:30:44.983917 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 15 11:30:44.983923 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 15 11:30:44.983930 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 15 11:30:44.983938 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 15 11:30:44.983945 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 15 11:30:44.983953 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 15 11:30:44.983965 kernel: NX (Execute Disable) protection: active Jul 15 11:30:44.983974 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 15 11:30:44.983982 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 15 11:30:44.983990 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 15 11:30:44.983997 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 15 11:30:44.984004 kernel: extended physical RAM map: Jul 15 11:30:44.984012 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 15 11:30:44.984022 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 15 11:30:44.984029 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 15 11:30:44.984035 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Jul 15 11:30:44.984042 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 15 11:30:44.984049 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 15 11:30:44.984058 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 15 11:30:44.984066 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b438017] usable Jul 15 11:30:44.984074 kernel: reserve setup_data: [mem 0x000000009b438018-0x000000009b474e57] usable Jul 15 11:30:44.984081 kernel: reserve setup_data: [mem 0x000000009b474e58-0x000000009b475017] usable Jul 15 11:30:44.984089 kernel: reserve setup_data: [mem 0x000000009b475018-0x000000009b47ec57] usable Jul 15 11:30:44.984096 kernel: reserve setup_data: [mem 0x000000009b47ec58-0x000000009c8eefff] usable Jul 15 11:30:44.984106 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 15 11:30:44.984114 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 15 11:30:44.984121 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 15 11:30:44.984129 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 15 11:30:44.984141 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 15 11:30:44.984150 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 15 11:30:44.984158 kernel: reserve setup_data: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 15 11:30:44.984168 kernel: efi: EFI v2.70 by EDK II Jul 15 11:30:44.984176 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b673018 RNG=0x9cb73018 Jul 15 11:30:44.984184 kernel: random: crng init done Jul 15 11:30:44.984193 kernel: SMBIOS 2.8 present. Jul 15 11:30:44.984201 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Jul 15 11:30:44.984209 kernel: Hypervisor detected: KVM Jul 15 11:30:44.984217 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 15 11:30:44.984226 kernel: kvm-clock: cpu 0, msr 4b19b001, primary cpu clock Jul 15 11:30:44.984234 kernel: kvm-clock: using sched offset of 5130436584 cycles Jul 15 11:30:44.984249 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 15 11:30:44.984258 kernel: tsc: Detected 2794.750 MHz processor Jul 15 11:30:44.984267 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 15 11:30:44.984276 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 15 11:30:44.984284 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Jul 15 11:30:44.984293 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 15 11:30:44.984302 kernel: Using GB pages for direct mapping Jul 15 11:30:44.984310 kernel: Secure boot disabled Jul 15 11:30:44.984319 kernel: ACPI: Early table checksum verification disabled Jul 15 11:30:44.984330 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Jul 15 11:30:44.984338 kernel: ACPI: XSDT 0x000000009CB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Jul 15 11:30:44.984347 kernel: ACPI: FACP 0x000000009CB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:30:44.984355 kernel: ACPI: DSDT 0x000000009CB7A000 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:30:44.984366 kernel: ACPI: FACS 0x000000009CBDD000 000040 Jul 15 11:30:44.984375 kernel: ACPI: APIC 0x000000009CB78000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:30:44.984384 kernel: ACPI: HPET 0x000000009CB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:30:44.984396 kernel: ACPI: MCFG 0x000000009CB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:30:44.984405 kernel: ACPI: WAET 0x000000009CB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:30:44.984423 kernel: ACPI: BGRT 0x000000009CB74000 000038 (v01 INTEL EDK2 00000002 01000013) Jul 15 11:30:44.984432 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb79000-0x9cb790f3] Jul 15 11:30:44.984440 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7a000-0x9cb7c1b9] Jul 15 11:30:44.984449 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Jul 15 11:30:44.984457 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb78000-0x9cb7808f] Jul 15 11:30:44.984466 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb77000-0x9cb77037] Jul 15 11:30:44.984474 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cb76000-0x9cb7603b] Jul 15 11:30:44.984483 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb75000-0x9cb75027] Jul 15 11:30:44.984491 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb74000-0x9cb74037] Jul 15 11:30:44.984502 kernel: No NUMA configuration found Jul 15 11:30:44.984510 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Jul 15 11:30:44.984519 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Jul 15 11:30:44.984527 kernel: Zone ranges: Jul 15 11:30:44.984535 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 15 11:30:44.984544 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Jul 15 11:30:44.984553 kernel: Normal empty Jul 15 11:30:44.984562 kernel: Movable zone start for each node Jul 15 11:30:44.984570 kernel: Early memory node ranges Jul 15 11:30:44.984580 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Jul 15 11:30:44.984589 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Jul 15 11:30:44.984597 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Jul 15 11:30:44.984605 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Jul 15 11:30:44.984614 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Jul 15 11:30:44.984623 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Jul 15 11:30:44.984632 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Jul 15 11:30:44.984641 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:30:44.984649 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Jul 15 11:30:44.984658 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Jul 15 11:30:44.984668 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:30:44.984676 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Jul 15 11:30:44.984685 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Jul 15 11:30:44.984693 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Jul 15 11:30:44.984702 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 15 11:30:44.984710 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 15 11:30:44.984718 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 15 11:30:44.984727 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 15 11:30:44.984734 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 15 11:30:44.984742 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 15 11:30:44.984749 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 15 11:30:44.984755 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 15 11:30:44.984766 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 15 11:30:44.984775 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 15 11:30:44.984782 kernel: TSC deadline timer available Jul 15 11:30:44.984789 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 15 11:30:44.984795 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 15 11:30:44.984802 kernel: kvm-guest: setup PV sched yield Jul 15 11:30:44.984811 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Jul 15 11:30:44.984817 kernel: Booting paravirtualized kernel on KVM Jul 15 11:30:44.984830 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 15 11:30:44.984839 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 15 11:30:44.984846 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 15 11:30:44.984853 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 15 11:30:44.984860 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 15 11:30:44.984867 kernel: kvm-guest: setup async PF for cpu 0 Jul 15 11:30:44.984873 kernel: kvm-guest: stealtime: cpu 0, msr 9b21c0c0 Jul 15 11:30:44.984880 kernel: kvm-guest: PV spinlocks enabled Jul 15 11:30:44.984887 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 15 11:30:44.984905 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Jul 15 11:30:44.984914 kernel: Policy zone: DMA32 Jul 15 11:30:44.984922 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:30:44.984930 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:30:44.984937 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 15 11:30:44.984946 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:30:44.984953 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:30:44.984960 kernel: Memory: 2397432K/2567000K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 169308K reserved, 0K cma-reserved) Jul 15 11:30:44.984967 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 15 11:30:44.984974 kernel: ftrace: allocating 34607 entries in 136 pages Jul 15 11:30:44.984981 kernel: ftrace: allocated 136 pages with 2 groups Jul 15 11:30:44.984988 kernel: rcu: Hierarchical RCU implementation. Jul 15 11:30:44.984995 kernel: rcu: RCU event tracing is enabled. Jul 15 11:30:44.985003 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 15 11:30:44.985012 kernel: Rude variant of Tasks RCU enabled. Jul 15 11:30:44.985019 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:30:44.985026 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:30:44.985033 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 15 11:30:44.985039 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 15 11:30:44.985046 kernel: Console: colour dummy device 80x25 Jul 15 11:30:44.985053 kernel: printk: console [ttyS0] enabled Jul 15 11:30:44.985060 kernel: ACPI: Core revision 20210730 Jul 15 11:30:44.985068 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 15 11:30:44.985077 kernel: APIC: Switch to symmetric I/O mode setup Jul 15 11:30:44.985084 kernel: x2apic enabled Jul 15 11:30:44.985091 kernel: Switched APIC routing to physical x2apic. Jul 15 11:30:44.985098 kernel: kvm-guest: setup PV IPIs Jul 15 11:30:44.985104 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 15 11:30:44.985111 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 15 11:30:44.985119 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Jul 15 11:30:44.985126 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 15 11:30:44.985136 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 15 11:30:44.985145 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 15 11:30:44.985152 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 15 11:30:44.985159 kernel: Spectre V2 : Mitigation: Retpolines Jul 15 11:30:44.985166 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 15 11:30:44.985173 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 15 11:30:44.985180 kernel: RETBleed: Mitigation: untrained return thunk Jul 15 11:30:44.985187 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 15 11:30:44.985197 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 15 11:30:44.985204 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 15 11:30:44.985213 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 15 11:30:44.985220 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 15 11:30:44.985227 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 15 11:30:44.985234 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 15 11:30:44.985241 kernel: Freeing SMP alternatives memory: 32K Jul 15 11:30:44.985248 kernel: pid_max: default: 32768 minimum: 301 Jul 15 11:30:44.985255 kernel: LSM: Security Framework initializing Jul 15 11:30:44.985261 kernel: SELinux: Initializing. Jul 15 11:30:44.985268 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:30:44.985277 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:30:44.985284 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 15 11:30:44.985291 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 15 11:30:44.985298 kernel: ... version: 0 Jul 15 11:30:44.985305 kernel: ... bit width: 48 Jul 15 11:30:44.985312 kernel: ... generic registers: 6 Jul 15 11:30:44.985319 kernel: ... value mask: 0000ffffffffffff Jul 15 11:30:44.985326 kernel: ... max period: 00007fffffffffff Jul 15 11:30:44.985333 kernel: ... fixed-purpose events: 0 Jul 15 11:30:44.985341 kernel: ... event mask: 000000000000003f Jul 15 11:30:44.985348 kernel: signal: max sigframe size: 1776 Jul 15 11:30:44.985355 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:30:44.985362 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:30:44.985369 kernel: x86: Booting SMP configuration: Jul 15 11:30:44.985376 kernel: .... node #0, CPUs: #1 Jul 15 11:30:44.985383 kernel: kvm-clock: cpu 1, msr 4b19b041, secondary cpu clock Jul 15 11:30:44.985389 kernel: kvm-guest: setup async PF for cpu 1 Jul 15 11:30:44.985396 kernel: kvm-guest: stealtime: cpu 1, msr 9b29c0c0 Jul 15 11:30:44.985405 kernel: #2 Jul 15 11:30:44.985412 kernel: kvm-clock: cpu 2, msr 4b19b081, secondary cpu clock Jul 15 11:30:44.985428 kernel: kvm-guest: setup async PF for cpu 2 Jul 15 11:30:44.985435 kernel: kvm-guest: stealtime: cpu 2, msr 9b31c0c0 Jul 15 11:30:44.985441 kernel: #3 Jul 15 11:30:44.985448 kernel: kvm-clock: cpu 3, msr 4b19b0c1, secondary cpu clock Jul 15 11:30:44.985456 kernel: kvm-guest: setup async PF for cpu 3 Jul 15 11:30:44.985463 kernel: kvm-guest: stealtime: cpu 3, msr 9b39c0c0 Jul 15 11:30:44.985470 kernel: smp: Brought up 1 node, 4 CPUs Jul 15 11:30:44.985481 kernel: smpboot: Max logical packages: 1 Jul 15 11:30:44.985488 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Jul 15 11:30:44.985495 kernel: devtmpfs: initialized Jul 15 11:30:44.985502 kernel: x86/mm: Memory block size: 128MB Jul 15 11:30:44.985509 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Jul 15 11:30:44.985516 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Jul 15 11:30:44.985523 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Jul 15 11:30:44.985530 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Jul 15 11:30:44.985537 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Jul 15 11:30:44.985546 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:30:44.985553 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 15 11:30:44.985560 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:30:44.985567 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:30:44.985574 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:30:44.985581 kernel: audit: type=2000 audit(1752579045.142:1): state=initialized audit_enabled=0 res=1 Jul 15 11:30:44.985588 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:30:44.985595 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 15 11:30:44.985602 kernel: cpuidle: using governor menu Jul 15 11:30:44.985610 kernel: ACPI: bus type PCI registered Jul 15 11:30:44.985617 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:30:44.985624 kernel: dca service started, version 1.12.1 Jul 15 11:30:44.985631 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 15 11:30:44.985638 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 15 11:30:44.985645 kernel: PCI: Using configuration type 1 for base access Jul 15 11:30:44.985652 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 15 11:30:44.985659 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:30:44.985666 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:30:44.985675 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:30:44.985682 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:30:44.985688 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:30:44.985695 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:30:44.985702 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:30:44.985709 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:30:44.985716 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:30:44.985723 kernel: ACPI: Interpreter enabled Jul 15 11:30:44.985730 kernel: ACPI: PM: (supports S0 S3 S5) Jul 15 11:30:44.985739 kernel: ACPI: Using IOAPIC for interrupt routing Jul 15 11:30:44.985746 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 15 11:30:44.985753 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 15 11:30:44.985760 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 15 11:30:44.985949 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:30:44.986029 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 15 11:30:44.986103 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 15 11:30:44.986113 kernel: PCI host bridge to bus 0000:00 Jul 15 11:30:44.986212 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 15 11:30:44.986281 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 15 11:30:44.986348 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 15 11:30:44.986424 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 15 11:30:44.986503 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 15 11:30:44.986570 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window] Jul 15 11:30:44.991399 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 15 11:30:44.991523 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 15 11:30:44.991620 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 15 11:30:44.991697 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Jul 15 11:30:44.991772 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xc1044000-0xc1044fff] Jul 15 11:30:44.991846 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Jul 15 11:30:44.991971 kernel: pci 0000:00:01.0: BAR 0: assigned to efifb Jul 15 11:30:44.992052 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 15 11:30:44.992147 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 15 11:30:44.992225 kernel: pci 0000:00:02.0: reg 0x10: [io 0x6100-0x611f] Jul 15 11:30:44.994014 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xc1043000-0xc1043fff] Jul 15 11:30:44.994141 kernel: pci 0000:00:02.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Jul 15 11:30:44.994238 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 15 11:30:44.994316 kernel: pci 0000:00:03.0: reg 0x10: [io 0x6000-0x607f] Jul 15 11:30:44.994395 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Jul 15 11:30:44.994478 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Jul 15 11:30:44.994565 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 15 11:30:44.994639 kernel: pci 0000:00:04.0: reg 0x10: [io 0x60e0-0x60ff] Jul 15 11:30:44.994711 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Jul 15 11:30:44.994783 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Jul 15 11:30:44.994859 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Jul 15 11:30:44.994975 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 15 11:30:44.995050 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 15 11:30:44.995149 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 15 11:30:44.995230 kernel: pci 0000:00:1f.2: reg 0x20: [io 0x60c0-0x60df] Jul 15 11:30:44.995303 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xc1040000-0xc1040fff] Jul 15 11:30:44.995392 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 15 11:30:44.995480 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x6080-0x60bf] Jul 15 11:30:44.995491 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 15 11:30:44.995499 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 15 11:30:44.995506 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 15 11:30:44.995513 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 15 11:30:44.995521 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 15 11:30:44.995528 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 15 11:30:44.995535 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 15 11:30:44.995542 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 15 11:30:44.995552 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 15 11:30:44.995559 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 15 11:30:44.995566 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 15 11:30:44.995573 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 15 11:30:44.995581 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 15 11:30:44.995588 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 15 11:30:44.995595 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 15 11:30:44.995602 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 15 11:30:44.995610 kernel: iommu: Default domain type: Translated Jul 15 11:30:44.995619 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 15 11:30:44.995696 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 15 11:30:44.995769 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 15 11:30:44.995841 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 15 11:30:44.995851 kernel: vgaarb: loaded Jul 15 11:30:44.995858 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:30:44.995865 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:30:44.995873 kernel: PTP clock support registered Jul 15 11:30:44.995882 kernel: Registered efivars operations Jul 15 11:30:44.995902 kernel: PCI: Using ACPI for IRQ routing Jul 15 11:30:44.995910 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 15 11:30:44.995917 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Jul 15 11:30:44.995924 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Jul 15 11:30:44.995931 kernel: e820: reserve RAM buffer [mem 0x9b438018-0x9bffffff] Jul 15 11:30:44.995938 kernel: e820: reserve RAM buffer [mem 0x9b475018-0x9bffffff] Jul 15 11:30:44.995945 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Jul 15 11:30:44.995952 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Jul 15 11:30:44.995963 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 15 11:30:44.995970 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 15 11:30:44.995977 kernel: clocksource: Switched to clocksource kvm-clock Jul 15 11:30:44.995984 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:30:44.996011 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:30:44.996031 kernel: pnp: PnP ACPI init Jul 15 11:30:44.996131 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 15 11:30:44.996143 kernel: pnp: PnP ACPI: found 6 devices Jul 15 11:30:44.996154 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 15 11:30:44.996161 kernel: NET: Registered PF_INET protocol family Jul 15 11:30:44.996169 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 15 11:30:44.996176 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 15 11:30:44.996184 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:30:44.996191 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:30:44.996198 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 15 11:30:44.996206 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 15 11:30:44.996214 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:30:44.996222 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:30:44.996230 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:30:44.996237 kernel: NET: Registered PF_XDP protocol family Jul 15 11:30:44.996313 kernel: pci 0000:00:04.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Jul 15 11:30:44.996388 kernel: pci 0000:00:04.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Jul 15 11:30:44.996471 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 15 11:30:44.996539 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 15 11:30:44.996606 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 15 11:30:44.996674 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 15 11:30:44.996738 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 15 11:30:44.996802 kernel: pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window] Jul 15 11:30:44.996811 kernel: PCI: CLS 0 bytes, default 64 Jul 15 11:30:44.996818 kernel: Initialise system trusted keyrings Jul 15 11:30:44.996826 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 15 11:30:44.996833 kernel: Key type asymmetric registered Jul 15 11:30:44.996841 kernel: Asymmetric key parser 'x509' registered Jul 15 11:30:44.996848 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:30:44.996858 kernel: io scheduler mq-deadline registered Jul 15 11:30:44.996865 kernel: io scheduler kyber registered Jul 15 11:30:44.996885 kernel: io scheduler bfq registered Jul 15 11:30:44.996908 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 15 11:30:44.996916 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 15 11:30:44.996923 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 15 11:30:44.996931 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 15 11:30:44.996939 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:30:44.996946 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 15 11:30:44.996957 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 15 11:30:44.996964 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 15 11:30:44.996972 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 15 11:30:44.997233 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 15 11:30:44.997249 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 15 11:30:44.997326 kernel: rtc_cmos 00:04: registered as rtc0 Jul 15 11:30:44.997393 kernel: rtc_cmos 00:04: setting system clock to 2025-07-15T11:30:44 UTC (1752579044) Jul 15 11:30:44.997478 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 15 11:30:44.997488 kernel: efifb: probing for efifb Jul 15 11:30:44.997495 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Jul 15 11:30:44.997503 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Jul 15 11:30:44.997511 kernel: efifb: scrolling: redraw Jul 15 11:30:44.997519 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jul 15 11:30:44.997529 kernel: Console: switching to colour frame buffer device 160x50 Jul 15 11:30:44.997540 kernel: fb0: EFI VGA frame buffer device Jul 15 11:30:44.997549 kernel: pstore: Registered efi as persistent store backend Jul 15 11:30:44.997557 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:30:44.997566 kernel: Segment Routing with IPv6 Jul 15 11:30:44.997573 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:30:44.997581 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:30:44.997590 kernel: Key type dns_resolver registered Jul 15 11:30:44.997598 kernel: IPI shorthand broadcast: enabled Jul 15 11:30:44.997607 kernel: sched_clock: Marking stable (475001511, 124172959)->(661623888, -62449418) Jul 15 11:30:44.997615 kernel: registered taskstats version 1 Jul 15 11:30:44.997622 kernel: Loading compiled-in X.509 certificates Jul 15 11:30:44.997630 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: c4b3a19d3bd6de5654dc12075428550cf6251289' Jul 15 11:30:44.997637 kernel: Key type .fscrypt registered Jul 15 11:30:44.997644 kernel: Key type fscrypt-provisioning registered Jul 15 11:30:44.997652 kernel: pstore: Using crash dump compression: deflate Jul 15 11:30:44.997660 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:30:44.997667 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:30:44.997677 kernel: ima: No architecture policies found Jul 15 11:30:44.997684 kernel: clk: Disabling unused clocks Jul 15 11:30:44.997692 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 15 11:30:44.997699 kernel: Write protecting the kernel read-only data: 28672k Jul 15 11:30:44.997707 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 15 11:30:44.997714 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 15 11:30:44.997722 kernel: Run /init as init process Jul 15 11:30:44.997729 kernel: with arguments: Jul 15 11:30:44.997737 kernel: /init Jul 15 11:30:44.997746 kernel: with environment: Jul 15 11:30:44.997753 kernel: HOME=/ Jul 15 11:30:44.997761 kernel: TERM=linux Jul 15 11:30:44.997768 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:30:44.997778 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:30:44.997790 systemd[1]: Detected virtualization kvm. Jul 15 11:30:44.997798 systemd[1]: Detected architecture x86-64. Jul 15 11:30:44.997805 systemd[1]: Running in initrd. Jul 15 11:30:44.997815 systemd[1]: No hostname configured, using default hostname. Jul 15 11:30:44.997823 systemd[1]: Hostname set to . Jul 15 11:30:44.997831 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:30:44.997839 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:30:44.997847 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:30:44.997855 systemd[1]: Reached target cryptsetup.target. Jul 15 11:30:44.997862 systemd[1]: Reached target paths.target. Jul 15 11:30:44.997870 systemd[1]: Reached target slices.target. Jul 15 11:30:44.997880 systemd[1]: Reached target swap.target. Jul 15 11:30:44.997887 systemd[1]: Reached target timers.target. Jul 15 11:30:44.997911 systemd[1]: Listening on iscsid.socket. Jul 15 11:30:44.997918 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:30:44.997926 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:30:44.997934 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:30:44.997942 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:30:44.997950 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:30:44.997960 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:30:44.997968 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:30:44.997976 systemd[1]: Reached target sockets.target. Jul 15 11:30:44.997984 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:30:44.997991 systemd[1]: Finished network-cleanup.service. Jul 15 11:30:44.997999 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:30:44.998007 systemd[1]: Starting systemd-journald.service... Jul 15 11:30:44.998015 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:30:44.998023 systemd[1]: Starting systemd-resolved.service... Jul 15 11:30:44.998033 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:30:44.998041 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:30:44.998048 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:30:44.998057 kernel: audit: type=1130 audit(1752579044.982:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:44.998065 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:30:44.998073 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:30:44.998082 kernel: audit: type=1130 audit(1752579044.992:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:44.998090 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:30:44.998101 kernel: audit: type=1130 audit(1752579044.995:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:44.998109 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:30:44.998122 systemd-journald[196]: Journal started Jul 15 11:30:44.998168 systemd-journald[196]: Runtime Journal (/run/log/journal/e521d5423a1d4b65ae07a575acf2e841) is 6.0M, max 48.4M, 42.4M free. Jul 15 11:30:44.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:44.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:44.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.000678 systemd-modules-load[197]: Inserted module 'overlay' Jul 15 11:30:45.002236 systemd[1]: Started systemd-journald.service. Jul 15 11:30:45.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.006912 kernel: audit: type=1130 audit(1752579045.002:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.015228 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:30:45.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.016996 systemd-resolved[198]: Positive Trust Anchors: Jul 15 11:30:45.020567 kernel: audit: type=1130 audit(1752579045.016:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.017018 systemd-resolved[198]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:30:45.017046 systemd-resolved[198]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:30:45.019251 systemd-resolved[198]: Defaulting to hostname 'linux'. Jul 15 11:30:45.027010 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:30:45.029175 systemd[1]: Started systemd-resolved.service. Jul 15 11:30:45.030656 dracut-cmdline[214]: dracut-dracut-053 Jul 15 11:30:45.035045 kernel: audit: type=1130 audit(1752579045.029:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.030730 systemd[1]: Reached target nss-lookup.target. Jul 15 11:30:45.035944 dracut-cmdline[214]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:30:45.042249 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:30:45.047292 systemd-modules-load[197]: Inserted module 'br_netfilter' Jul 15 11:30:45.048176 kernel: Bridge firewalling registered Jul 15 11:30:45.063919 kernel: SCSI subsystem initialized Jul 15 11:30:45.075208 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:30:45.075245 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:30:45.076498 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:30:45.079202 systemd-modules-load[197]: Inserted module 'dm_multipath' Jul 15 11:30:45.079887 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:30:45.084316 kernel: audit: type=1130 audit(1752579045.079:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.081129 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:30:45.089606 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:30:45.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.093922 kernel: audit: type=1130 audit(1752579045.089:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.099915 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:30:45.116929 kernel: iscsi: registered transport (tcp) Jul 15 11:30:45.136919 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:30:45.136942 kernel: QLogic iSCSI HBA Driver Jul 15 11:30:45.167156 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:30:45.171358 kernel: audit: type=1130 audit(1752579045.166:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.168426 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:30:45.219965 kernel: raid6: avx2x4 gen() 21689 MB/s Jul 15 11:30:45.236944 kernel: raid6: avx2x4 xor() 6441 MB/s Jul 15 11:30:45.253934 kernel: raid6: avx2x2 gen() 25091 MB/s Jul 15 11:30:45.270940 kernel: raid6: avx2x2 xor() 15192 MB/s Jul 15 11:30:45.287926 kernel: raid6: avx2x1 gen() 23424 MB/s Jul 15 11:30:45.304920 kernel: raid6: avx2x1 xor() 14932 MB/s Jul 15 11:30:45.321919 kernel: raid6: sse2x4 gen() 14438 MB/s Jul 15 11:30:45.338918 kernel: raid6: sse2x4 xor() 7476 MB/s Jul 15 11:30:45.355921 kernel: raid6: sse2x2 gen() 16281 MB/s Jul 15 11:30:45.372925 kernel: raid6: sse2x2 xor() 9814 MB/s Jul 15 11:30:45.389921 kernel: raid6: sse2x1 gen() 12336 MB/s Jul 15 11:30:45.407246 kernel: raid6: sse2x1 xor() 7800 MB/s Jul 15 11:30:45.407268 kernel: raid6: using algorithm avx2x2 gen() 25091 MB/s Jul 15 11:30:45.407278 kernel: raid6: .... xor() 15192 MB/s, rmw enabled Jul 15 11:30:45.407930 kernel: raid6: using avx2x2 recovery algorithm Jul 15 11:30:45.420922 kernel: xor: automatically using best checksumming function avx Jul 15 11:30:45.517939 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 15 11:30:45.527529 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:30:45.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.528000 audit: BPF prog-id=7 op=LOAD Jul 15 11:30:45.528000 audit: BPF prog-id=8 op=LOAD Jul 15 11:30:45.529716 systemd[1]: Starting systemd-udevd.service... Jul 15 11:30:45.543687 systemd-udevd[401]: Using default interface naming scheme 'v252'. Jul 15 11:30:45.548709 systemd[1]: Started systemd-udevd.service. Jul 15 11:30:45.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.551019 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:30:45.561688 dracut-pre-trigger[405]: rd.md=0: removing MD RAID activation Jul 15 11:30:45.595636 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:30:45.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.598646 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:30:45.655872 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:30:45.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:45.692146 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 15 11:30:45.723094 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 15 11:30:45.723110 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:30:45.723120 kernel: GPT:9289727 != 19775487 Jul 15 11:30:45.723128 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 15 11:30:45.723137 kernel: GPT:9289727 != 19775487 Jul 15 11:30:45.723145 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 15 11:30:45.723154 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:30:45.723168 kernel: libata version 3.00 loaded. Jul 15 11:30:45.723177 kernel: AVX2 version of gcm_enc/dec engaged. Jul 15 11:30:45.723185 kernel: AES CTR mode by8 optimization enabled Jul 15 11:30:45.727621 kernel: ahci 0000:00:1f.2: version 3.0 Jul 15 11:30:45.749978 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 15 11:30:45.749993 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 15 11:30:45.750088 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 15 11:30:45.750172 kernel: scsi host0: ahci Jul 15 11:30:45.750274 kernel: scsi host1: ahci Jul 15 11:30:45.750383 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (447) Jul 15 11:30:45.750402 kernel: scsi host2: ahci Jul 15 11:30:45.750493 kernel: scsi host3: ahci Jul 15 11:30:45.750582 kernel: scsi host4: ahci Jul 15 11:30:45.750681 kernel: scsi host5: ahci Jul 15 11:30:45.750779 kernel: ata1: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040100 irq 34 Jul 15 11:30:45.750793 kernel: ata2: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040180 irq 34 Jul 15 11:30:45.750802 kernel: ata3: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040200 irq 34 Jul 15 11:30:45.750811 kernel: ata4: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040280 irq 34 Jul 15 11:30:45.750820 kernel: ata5: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040300 irq 34 Jul 15 11:30:45.750829 kernel: ata6: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040380 irq 34 Jul 15 11:30:45.744115 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:30:45.754009 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:30:45.763777 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:30:45.764916 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:30:45.768197 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:30:45.770090 systemd[1]: Starting disk-uuid.service... Jul 15 11:30:45.776721 disk-uuid[530]: Primary Header is updated. Jul 15 11:30:45.776721 disk-uuid[530]: Secondary Entries is updated. Jul 15 11:30:45.776721 disk-uuid[530]: Secondary Header is updated. Jul 15 11:30:45.780066 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:30:46.064294 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 15 11:30:46.064395 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 15 11:30:46.064419 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 15 11:30:46.064429 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 15 11:30:46.064438 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 15 11:30:46.065939 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 15 11:30:46.066935 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 15 11:30:46.066960 kernel: ata3.00: applying bridge limits Jul 15 11:30:46.068086 kernel: ata3.00: configured for UDMA/100 Jul 15 11:30:46.068926 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 15 11:30:46.101926 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 15 11:30:46.118967 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 15 11:30:46.118980 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 15 11:30:46.785935 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:30:46.786116 disk-uuid[531]: The operation has completed successfully. Jul 15 11:30:46.810652 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:30:46.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:46.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:46.810755 systemd[1]: Finished disk-uuid.service. Jul 15 11:30:46.815216 systemd[1]: Starting verity-setup.service... Jul 15 11:30:46.828921 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 15 11:30:46.849051 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:30:46.850699 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:30:46.853073 systemd[1]: Finished verity-setup.service. Jul 15 11:30:46.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:46.911923 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:30:46.912233 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:30:46.913153 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 15 11:30:46.913981 systemd[1]: Starting ignition-setup.service... Jul 15 11:30:46.916274 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:30:46.923173 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:30:46.923197 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:30:46.923206 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:30:46.932002 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:30:46.939128 systemd[1]: Finished ignition-setup.service. Jul 15 11:30:46.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:46.940963 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:30:46.976775 ignition[640]: Ignition 2.14.0 Jul 15 11:30:46.976788 ignition[640]: Stage: fetch-offline Jul 15 11:30:46.976862 ignition[640]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:30:46.976872 ignition[640]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:30:46.976988 ignition[640]: parsed url from cmdline: "" Jul 15 11:30:46.976992 ignition[640]: no config URL provided Jul 15 11:30:46.976996 ignition[640]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:30:46.977005 ignition[640]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:30:46.977021 ignition[640]: op(1): [started] loading QEMU firmware config module Jul 15 11:30:46.977026 ignition[640]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 15 11:30:46.980818 ignition[640]: op(1): [finished] loading QEMU firmware config module Jul 15 11:30:46.998161 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:30:46.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.000000 audit: BPF prog-id=9 op=LOAD Jul 15 11:30:47.001562 systemd[1]: Starting systemd-networkd.service... Jul 15 11:30:47.024851 ignition[640]: parsing config with SHA512: 37ba74a3385228dad510a9e33161fb30ef738c502902bd5f2fe0fc9a07413e7ac368a964a3fa728c02a0bde4884544831f18b8844c0c5151deeff6045731d5e5 Jul 15 11:30:47.033089 unknown[640]: fetched base config from "system" Jul 15 11:30:47.033101 unknown[640]: fetched user config from "qemu" Jul 15 11:30:47.033530 ignition[640]: fetch-offline: fetch-offline passed Jul 15 11:30:47.035216 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:30:47.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.033582 ignition[640]: Ignition finished successfully Jul 15 11:30:47.044427 systemd-networkd[726]: lo: Link UP Jul 15 11:30:47.044437 systemd-networkd[726]: lo: Gained carrier Jul 15 11:30:47.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.044921 systemd-networkd[726]: Enumeration completed Jul 15 11:30:47.045054 systemd[1]: Started systemd-networkd.service. Jul 15 11:30:47.045142 systemd-networkd[726]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:30:47.046454 systemd-networkd[726]: eth0: Link UP Jul 15 11:30:47.046457 systemd-networkd[726]: eth0: Gained carrier Jul 15 11:30:47.046617 systemd[1]: Reached target network.target. Jul 15 11:30:47.048123 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:30:47.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.048992 systemd[1]: Starting ignition-kargs.service... Jul 15 11:30:47.051212 systemd[1]: Starting iscsiuio.service... Jul 15 11:30:47.055118 systemd[1]: Started iscsiuio.service. Jul 15 11:30:47.059450 ignition[728]: Ignition 2.14.0 Jul 15 11:30:47.061386 iscsid[737]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:30:47.061386 iscsid[737]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:30:47.061386 iscsid[737]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:30:47.061386 iscsid[737]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:30:47.061386 iscsid[737]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:30:47.061386 iscsid[737]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:30:47.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.057120 systemd[1]: Starting iscsid.service... Jul 15 11:30:47.059503 ignition[728]: Stage: kargs Jul 15 11:30:47.058193 systemd-networkd[726]: eth0: DHCPv4 address 10.0.0.76/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:30:47.059690 ignition[728]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:30:47.062292 systemd[1]: Started iscsid.service. Jul 15 11:30:47.059702 ignition[728]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:30:47.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.063840 systemd[1]: Finished ignition-kargs.service. Jul 15 11:30:47.060867 ignition[728]: kargs: kargs passed Jul 15 11:30:47.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.069947 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:30:47.060923 ignition[728]: Ignition finished successfully Jul 15 11:30:47.071272 systemd[1]: Starting ignition-disks.service... Jul 15 11:30:47.078636 ignition[739]: Ignition 2.14.0 Jul 15 11:30:47.079827 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:30:47.078642 ignition[739]: Stage: disks Jul 15 11:30:47.081194 systemd[1]: Finished ignition-disks.service. Jul 15 11:30:47.078728 ignition[739]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:30:47.082682 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:30:47.078736 ignition[739]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:30:47.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.084092 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:30:47.079694 ignition[739]: disks: disks passed Jul 15 11:30:47.084930 systemd[1]: Reached target local-fs.target. Jul 15 11:30:47.079735 ignition[739]: Ignition finished successfully Jul 15 11:30:47.085709 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:30:47.087247 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:30:47.087651 systemd[1]: Reached target remote-fs.target. Jul 15 11:30:47.088138 systemd[1]: Reached target sysinit.target. Jul 15 11:30:47.088292 systemd[1]: Reached target basic.target. Jul 15 11:30:47.089284 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:30:47.096578 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:30:47.098101 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:30:47.111274 systemd-fsck[760]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 15 11:30:47.115990 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:30:47.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.116829 systemd[1]: Mounting sysroot.mount... Jul 15 11:30:47.123580 systemd[1]: Mounted sysroot.mount. Jul 15 11:30:47.124817 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:30:47.123880 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:30:47.126427 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:30:47.127162 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:30:47.127205 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:30:47.127233 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:30:47.135000 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:30:47.136397 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:30:47.142207 initrd-setup-root[770]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:30:47.145563 initrd-setup-root[778]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:30:47.149581 initrd-setup-root[786]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:30:47.153853 initrd-setup-root[794]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:30:47.181315 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:30:47.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.183709 systemd[1]: Starting ignition-mount.service... Jul 15 11:30:47.185726 systemd[1]: Starting sysroot-boot.service... Jul 15 11:30:47.189315 bash[811]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:30:47.198139 ignition[813]: INFO : Ignition 2.14.0 Jul 15 11:30:47.198139 ignition[813]: INFO : Stage: mount Jul 15 11:30:47.200838 ignition[813]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:30:47.200838 ignition[813]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:30:47.200838 ignition[813]: INFO : mount: mount passed Jul 15 11:30:47.200838 ignition[813]: INFO : Ignition finished successfully Jul 15 11:30:47.205052 systemd[1]: Finished ignition-mount.service. Jul 15 11:30:47.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.207222 systemd[1]: Finished sysroot-boot.service. Jul 15 11:30:47.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:47.860964 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:30:47.866918 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (821) Jul 15 11:30:47.866951 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:30:47.869125 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:30:47.869138 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:30:47.873840 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:30:47.876889 systemd[1]: Starting ignition-files.service... Jul 15 11:30:47.890306 ignition[841]: INFO : Ignition 2.14.0 Jul 15 11:30:47.890306 ignition[841]: INFO : Stage: files Jul 15 11:30:47.891998 ignition[841]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:30:47.891998 ignition[841]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:30:47.891998 ignition[841]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:30:47.895212 ignition[841]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:30:47.895212 ignition[841]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:30:47.899140 ignition[841]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:30:47.900572 ignition[841]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:30:47.901930 ignition[841]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:30:47.901930 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 15 11:30:47.901930 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Jul 15 11:30:47.901207 unknown[841]: wrote ssh authorized keys file for user: core Jul 15 11:30:47.941723 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:30:48.163071 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 15 11:30:48.163071 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:30:48.167095 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:30:48.167095 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:30:48.170418 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:30:48.170418 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:30:48.173723 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:30:48.175376 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:30:48.177114 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:30:48.178827 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:30:48.180535 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:30:48.182169 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:30:48.184784 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:30:48.187171 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:30:48.189468 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Jul 15 11:30:48.311088 systemd-networkd[726]: eth0: Gained IPv6LL Jul 15 11:30:48.611149 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 15 11:30:49.116749 ignition[841]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:30:49.116749 ignition[841]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:30:49.120940 ignition[841]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:30:49.156281 ignition[841]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:30:49.157865 ignition[841]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:30:49.157865 ignition[841]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:30:49.157865 ignition[841]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:30:49.157865 ignition[841]: INFO : files: files passed Jul 15 11:30:49.157865 ignition[841]: INFO : Ignition finished successfully Jul 15 11:30:49.164841 systemd[1]: Finished ignition-files.service. Jul 15 11:30:49.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.166052 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:30:49.167204 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:30:49.167785 systemd[1]: Starting ignition-quench.service... Jul 15 11:30:49.172870 initrd-setup-root-after-ignition[866]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 15 11:30:49.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.171578 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:30:49.176439 initrd-setup-root-after-ignition[868]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:30:49.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.171699 systemd[1]: Finished ignition-quench.service. Jul 15 11:30:49.174695 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:30:49.176510 systemd[1]: Reached target ignition-complete.target. Jul 15 11:30:49.179576 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:30:49.191560 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:30:49.191684 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:30:49.201815 kernel: kauditd_printk_skb: 28 callbacks suppressed Jul 15 11:30:49.202680 kernel: audit: type=1130 audit(1752579049.193:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.202697 kernel: audit: type=1131 audit(1752579049.193:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.193860 systemd[1]: Reached target initrd-fs.target. Jul 15 11:30:49.201781 systemd[1]: Reached target initrd.target. Jul 15 11:30:49.202676 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:30:49.203477 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:30:49.212694 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:30:49.217694 kernel: audit: type=1130 audit(1752579049.213:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.214205 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:30:49.221929 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:30:49.222837 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:30:49.224404 systemd[1]: Stopped target timers.target. Jul 15 11:30:49.226004 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:30:49.231797 kernel: audit: type=1131 audit(1752579049.226:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.226090 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:30:49.227549 systemd[1]: Stopped target initrd.target. Jul 15 11:30:49.231869 systemd[1]: Stopped target basic.target. Jul 15 11:30:49.232782 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:30:49.234438 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:30:49.236121 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:30:49.237702 systemd[1]: Stopped target remote-fs.target. Jul 15 11:30:49.239413 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:30:49.241056 systemd[1]: Stopped target sysinit.target. Jul 15 11:30:49.242617 systemd[1]: Stopped target local-fs.target. Jul 15 11:30:49.244139 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:30:49.252915 kernel: audit: type=1131 audit(1752579049.247:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.245719 systemd[1]: Stopped target swap.target. Jul 15 11:30:49.247141 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:30:49.259161 kernel: audit: type=1131 audit(1752579049.254:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.247230 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:30:49.263400 kernel: audit: type=1131 audit(1752579049.259:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.248750 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:30:49.252939 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:30:49.253024 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:30:49.254628 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:30:49.254717 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:30:49.259255 systemd[1]: Stopped target paths.target. Jul 15 11:30:49.263435 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:30:49.268962 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:30:49.270569 systemd[1]: Stopped target slices.target. Jul 15 11:30:49.272080 systemd[1]: Stopped target sockets.target. Jul 15 11:30:49.273540 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:30:49.273618 systemd[1]: Closed iscsid.socket. Jul 15 11:30:49.280860 kernel: audit: type=1131 audit(1752579049.275:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.274967 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:30:49.285356 kernel: audit: type=1131 audit(1752579049.280:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.275067 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:30:49.276711 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:30:49.276797 systemd[1]: Stopped ignition-files.service. Jul 15 11:30:49.292913 kernel: audit: type=1131 audit(1752579049.287:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.292985 ignition[881]: INFO : Ignition 2.14.0 Jul 15 11:30:49.292985 ignition[881]: INFO : Stage: umount Jul 15 11:30:49.292985 ignition[881]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:30:49.292985 ignition[881]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:30:49.292985 ignition[881]: INFO : umount: umount passed Jul 15 11:30:49.292985 ignition[881]: INFO : Ignition finished successfully Jul 15 11:30:49.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.283853 systemd[1]: Stopping ignition-mount.service... Jul 15 11:30:49.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.285541 systemd[1]: Stopping iscsiuio.service... Jul 15 11:30:49.286978 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:30:49.287115 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:30:49.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.292019 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:30:49.292932 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:30:49.293042 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:30:49.294059 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:30:49.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.294180 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:30:49.297246 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:30:49.297338 systemd[1]: Stopped iscsiuio.service. Jul 15 11:30:49.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.299458 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:30:49.299526 systemd[1]: Stopped ignition-mount.service. Jul 15 11:30:49.301068 systemd[1]: Stopped target network.target. Jul 15 11:30:49.326000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:30:49.302417 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:30:49.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.302448 systemd[1]: Closed iscsiuio.socket. Jul 15 11:30:49.302689 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:30:49.302721 systemd[1]: Stopped ignition-disks.service. Jul 15 11:30:49.302874 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:30:49.302915 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:30:49.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.303042 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:30:49.303071 systemd[1]: Stopped ignition-setup.service. Jul 15 11:30:49.303278 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:30:49.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.303485 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:30:49.304612 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:30:49.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.305045 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:30:49.305116 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:30:49.308947 systemd-networkd[726]: eth0: DHCPv6 lease lost Jul 15 11:30:49.310331 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:30:49.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.346000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:30:49.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.310411 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:30:49.313292 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:30:49.313329 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:30:49.315636 systemd[1]: Stopping network-cleanup.service... Jul 15 11:30:49.316525 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:30:49.316568 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:30:49.317279 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:30:49.317323 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:30:49.318346 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:30:49.318377 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:30:49.320178 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:30:49.321648 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:30:49.322015 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:30:49.322094 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:30:49.327424 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:30:49.327495 systemd[1]: Stopped network-cleanup.service. Jul 15 11:30:49.331691 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:30:49.331801 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:30:49.333522 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:30:49.333559 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:30:49.335110 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:30:49.335141 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:30:49.336797 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:30:49.336832 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:30:49.338408 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:30:49.338440 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:30:49.339977 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:30:49.340013 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:30:49.342320 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:30:49.343375 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:30:49.343416 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:30:49.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.347342 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:30:49.347412 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:30:49.375005 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:30:49.375080 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:30:49.376096 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:30:49.377647 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:30:49.377684 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:30:49.379090 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:30:49.394766 systemd[1]: Switching root. Jul 15 11:30:49.412677 iscsid[737]: iscsid shutting down. Jul 15 11:30:49.413467 systemd-journald[196]: Received SIGTERM from PID 1 (n/a). Jul 15 11:30:49.413534 systemd-journald[196]: Journal stopped Jul 15 11:30:51.998629 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:30:51.998699 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:30:51.998711 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:30:51.998723 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:30:51.998733 kernel: SELinux: policy capability open_perms=1 Jul 15 11:30:51.998743 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:30:51.998757 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:30:51.998767 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:30:51.998777 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:30:51.998786 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:30:51.998803 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:30:51.998814 systemd[1]: Successfully loaded SELinux policy in 39.254ms. Jul 15 11:30:51.998840 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.834ms. Jul 15 11:30:51.998854 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:30:51.998865 systemd[1]: Detected virtualization kvm. Jul 15 11:30:51.998876 systemd[1]: Detected architecture x86-64. Jul 15 11:30:51.998886 systemd[1]: Detected first boot. Jul 15 11:30:51.998914 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:30:51.998925 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:30:51.998938 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:30:51.998949 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:30:51.998960 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:30:51.998972 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:30:51.998983 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:30:51.998994 systemd[1]: Stopped iscsid.service. Jul 15 11:30:51.999005 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:30:51.999015 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:30:51.999032 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:30:51.999042 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:30:51.999053 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:30:51.999063 systemd[1]: Created slice system-getty.slice. Jul 15 11:30:51.999074 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:30:51.999084 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:30:51.999099 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:30:51.999111 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:30:51.999121 systemd[1]: Created slice user.slice. Jul 15 11:30:51.999132 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:30:51.999143 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:30:51.999153 systemd[1]: Set up automount boot.automount. Jul 15 11:30:51.999164 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:30:51.999174 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:30:51.999189 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:30:51.999200 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:30:51.999212 systemd[1]: Reached target integritysetup.target. Jul 15 11:30:51.999237 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:30:51.999251 systemd[1]: Reached target remote-fs.target. Jul 15 11:30:51.999267 systemd[1]: Reached target slices.target. Jul 15 11:30:51.999279 systemd[1]: Reached target swap.target. Jul 15 11:30:51.999290 systemd[1]: Reached target torcx.target. Jul 15 11:30:51.999301 systemd[1]: Reached target veritysetup.target. Jul 15 11:30:51.999317 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:30:51.999328 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:30:51.999338 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:30:51.999349 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:30:51.999361 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:30:51.999374 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:30:51.999384 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:30:51.999394 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:30:51.999405 systemd[1]: Mounting media.mount... Jul 15 11:30:51.999420 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:51.999431 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:30:51.999442 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:30:51.999452 systemd[1]: Mounting tmp.mount... Jul 15 11:30:51.999462 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:30:51.999473 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:30:51.999484 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:30:51.999495 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:30:51.999505 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:30:51.999520 systemd[1]: Starting modprobe@drm.service... Jul 15 11:30:51.999530 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:30:51.999540 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:30:51.999550 systemd[1]: Starting modprobe@loop.service... Jul 15 11:30:51.999561 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:30:51.999572 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:30:51.999582 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:30:51.999592 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:30:51.999604 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:30:51.999616 kernel: fuse: init (API version 7.34) Jul 15 11:30:51.999627 systemd[1]: Stopped systemd-journald.service. Jul 15 11:30:51.999637 systemd[1]: Starting systemd-journald.service... Jul 15 11:30:51.999647 kernel: loop: module loaded Jul 15 11:30:51.999657 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:30:51.999668 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:30:51.999679 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:30:51.999689 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:30:51.999700 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:30:51.999711 systemd[1]: Stopped verity-setup.service. Jul 15 11:30:51.999724 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:51.999737 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:30:51.999752 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:30:51.999764 systemd[1]: Mounted media.mount. Jul 15 11:30:51.999774 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:30:51.999785 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:30:51.999798 systemd-journald[993]: Journal started Jul 15 11:30:51.999848 systemd-journald[993]: Runtime Journal (/run/log/journal/e521d5423a1d4b65ae07a575acf2e841) is 6.0M, max 48.4M, 42.4M free. Jul 15 11:30:49.471000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:30:49.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:30:49.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:30:49.769000 audit: BPF prog-id=10 op=LOAD Jul 15 11:30:49.769000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:30:49.769000 audit: BPF prog-id=11 op=LOAD Jul 15 11:30:49.769000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:30:49.802000 audit[915]: AVC avc: denied { associate } for pid=915 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:30:49.802000 audit[915]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001558b4 a1=c0000d8de0 a2=c0000e1040 a3=32 items=0 ppid=898 pid=915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:49.802000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:30:49.803000 audit[915]: AVC avc: denied { associate } for pid=915 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:30:49.803000 audit[915]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c000155989 a2=1ed a3=0 items=2 ppid=898 pid=915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:49.803000 audit: CWD cwd="/" Jul 15 11:30:49.803000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:49.803000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:49.803000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:30:51.861000 audit: BPF prog-id=12 op=LOAD Jul 15 11:30:51.862000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:30:51.862000 audit: BPF prog-id=13 op=LOAD Jul 15 11:30:51.862000 audit: BPF prog-id=14 op=LOAD Jul 15 11:30:51.862000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:30:51.862000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:30:51.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:51.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:51.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:51.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:51.872000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:30:51.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:51.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:51.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:51.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:51.971000 audit: BPF prog-id=15 op=LOAD Jul 15 11:30:51.971000 audit: BPF prog-id=16 op=LOAD Jul 15 11:30:51.971000 audit: BPF prog-id=17 op=LOAD Jul 15 11:30:51.971000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:30:51.971000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:30:51.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:51.996000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:30:51.996000 audit[993]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffff679b0a0 a2=4000 a3=7ffff679b13c items=0 ppid=1 pid=993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:51.996000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:30:49.801354 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:30:51.860733 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:30:49.801566 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:30:51.860745 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 15 11:30:49.801585 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:30:51.864179 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:30:49.801616 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:30:49.801625 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:30:49.801652 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:30:49.801663 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:30:52.001936 systemd[1]: Started systemd-journald.service. Jul 15 11:30:49.801849 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:30:49.801884 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:30:49.801923 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:30:49.802564 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:30:49.802608 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:30:49.802631 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:30:49.802652 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:30:52.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:49.802673 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:30:49.802691 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:49Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:30:51.594799 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:51Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:30:52.003036 systemd[1]: Mounted tmp.mount. Jul 15 11:30:51.595086 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:51Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:30:51.595187 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:51Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:30:51.595345 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:51Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:30:51.595390 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:51Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:30:51.595445 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-15T11:30:51Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:30:52.004173 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:30:52.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.005309 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:30:52.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.006403 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:30:52.006625 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:30:52.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.007754 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:30:52.007996 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:30:52.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.009071 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:30:52.009243 systemd[1]: Finished modprobe@drm.service. Jul 15 11:30:52.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.010275 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:30:52.010424 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:30:52.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.011509 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:30:52.011694 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:30:52.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.012857 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:30:52.013033 systemd[1]: Finished modprobe@loop.service. Jul 15 11:30:52.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.014145 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:30:52.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.015295 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:30:52.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.016603 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:30:52.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.017965 systemd[1]: Reached target network-pre.target. Jul 15 11:30:52.020396 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:30:52.022633 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:30:52.023460 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:30:52.024956 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:30:52.026794 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:30:52.030012 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:30:52.031141 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:30:52.033922 systemd-journald[993]: Time spent on flushing to /var/log/journal/e521d5423a1d4b65ae07a575acf2e841 is 13.458ms for 1149 entries. Jul 15 11:30:52.033922 systemd-journald[993]: System Journal (/var/log/journal/e521d5423a1d4b65ae07a575acf2e841) is 8.0M, max 195.6M, 187.6M free. Jul 15 11:30:52.057940 systemd-journald[993]: Received client request to flush runtime journal. Jul 15 11:30:52.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.032037 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:30:52.032957 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:30:52.034709 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:30:52.058930 udevadm[1020]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 15 11:30:52.037744 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:30:52.038815 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:30:52.039796 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:30:52.041488 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:30:52.049918 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:30:52.050989 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:30:52.052107 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:30:52.056968 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:30:52.058679 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:30:52.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.589102 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:30:52.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.589000 audit: BPF prog-id=18 op=LOAD Jul 15 11:30:52.589000 audit: BPF prog-id=19 op=LOAD Jul 15 11:30:52.589000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:30:52.589000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:30:52.591568 systemd[1]: Starting systemd-udevd.service... Jul 15 11:30:52.607250 systemd-udevd[1023]: Using default interface naming scheme 'v252'. Jul 15 11:30:52.619416 systemd[1]: Started systemd-udevd.service. Jul 15 11:30:52.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.621000 audit: BPF prog-id=20 op=LOAD Jul 15 11:30:52.622795 systemd[1]: Starting systemd-networkd.service... Jul 15 11:30:52.628081 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:30:52.626000 audit: BPF prog-id=21 op=LOAD Jul 15 11:30:52.626000 audit: BPF prog-id=22 op=LOAD Jul 15 11:30:52.626000 audit: BPF prog-id=23 op=LOAD Jul 15 11:30:52.654158 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 15 11:30:52.658517 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:30:52.659774 systemd[1]: Started systemd-userdbd.service. Jul 15 11:30:52.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.686949 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 15 11:30:52.690919 kernel: ACPI: button: Power Button [PWRF] Jul 15 11:30:52.701710 systemd-networkd[1032]: lo: Link UP Jul 15 11:30:52.702026 systemd-networkd[1032]: lo: Gained carrier Jul 15 11:30:52.702421 systemd-networkd[1032]: Enumeration completed Jul 15 11:30:52.702514 systemd[1]: Started systemd-networkd.service. Jul 15 11:30:52.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.703328 systemd-networkd[1032]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:30:52.704386 systemd-networkd[1032]: eth0: Link UP Jul 15 11:30:52.704395 systemd-networkd[1032]: eth0: Gained carrier Jul 15 11:30:52.718024 systemd-networkd[1032]: eth0: DHCPv4 address 10.0.0.76/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:30:52.707000 audit[1031]: AVC avc: denied { confidentiality } for pid=1031 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 15 11:30:52.707000 audit[1031]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5652bd1a34e0 a1=338ac a2=7fe649ef0bc5 a3=5 items=110 ppid=1023 pid=1031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:52.707000 audit: CWD cwd="/" Jul 15 11:30:52.707000 audit: PATH item=0 name=(null) inode=51 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=1 name=(null) inode=12967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=2 name=(null) inode=12967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=3 name=(null) inode=12968 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=4 name=(null) inode=12967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=5 name=(null) inode=12969 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=6 name=(null) inode=12967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=7 name=(null) inode=12970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=8 name=(null) inode=12970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=9 name=(null) inode=12971 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=10 name=(null) inode=12970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=11 name=(null) inode=12972 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=12 name=(null) inode=12970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=13 name=(null) inode=12973 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=14 name=(null) inode=12970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=15 name=(null) inode=12974 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=16 name=(null) inode=12970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=17 name=(null) inode=12975 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=18 name=(null) inode=12967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=19 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=20 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=21 name=(null) inode=12977 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=22 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=23 name=(null) inode=12978 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=24 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=25 name=(null) inode=12979 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=26 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=27 name=(null) inode=12980 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=28 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=29 name=(null) inode=12981 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=30 name=(null) inode=12967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=31 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=32 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=33 name=(null) inode=12983 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=34 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=35 name=(null) inode=12984 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=36 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=37 name=(null) inode=12985 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=38 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=39 name=(null) inode=12986 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=40 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=41 name=(null) inode=12987 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=42 name=(null) inode=12967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=43 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=44 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=45 name=(null) inode=12989 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=46 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=47 name=(null) inode=12990 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=48 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=49 name=(null) inode=12991 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=50 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=51 name=(null) inode=12992 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=52 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=53 name=(null) inode=12993 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=54 name=(null) inode=51 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=55 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=56 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=57 name=(null) inode=12995 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=58 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=59 name=(null) inode=12996 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=60 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=61 name=(null) inode=12997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=62 name=(null) inode=12997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=63 name=(null) inode=12998 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=64 name=(null) inode=12997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=65 name=(null) inode=12999 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=66 name=(null) inode=12997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=67 name=(null) inode=13000 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=68 name=(null) inode=12997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=69 name=(null) inode=13001 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=70 name=(null) inode=12997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=71 name=(null) inode=13002 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=72 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=73 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=74 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=75 name=(null) inode=13004 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=76 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=77 name=(null) inode=13005 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=78 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=79 name=(null) inode=13006 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=80 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=81 name=(null) inode=13007 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=82 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=83 name=(null) inode=13008 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=84 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=85 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.733389 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Jul 15 11:30:52.735553 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 15 11:30:52.735681 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 15 11:30:52.735804 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 15 11:30:52.707000 audit: PATH item=86 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=87 name=(null) inode=13010 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=88 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=89 name=(null) inode=13011 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=90 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=91 name=(null) inode=13012 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=92 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=93 name=(null) inode=13013 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=94 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=95 name=(null) inode=13014 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=96 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=97 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=98 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=99 name=(null) inode=13016 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=100 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=101 name=(null) inode=13017 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=102 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=103 name=(null) inode=13018 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=104 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=105 name=(null) inode=13019 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=106 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=107 name=(null) inode=13020 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PATH item=109 name=(null) inode=13021 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:30:52.707000 audit: PROCTITLE proctitle="(udev-worker)" Jul 15 11:30:52.745932 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 15 11:30:52.747957 kernel: mousedev: PS/2 mouse device common for all mice Jul 15 11:30:52.801989 kernel: kvm: Nested Virtualization enabled Jul 15 11:30:52.802103 kernel: SVM: kvm: Nested Paging enabled Jul 15 11:30:52.802127 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 15 11:30:52.803124 kernel: SVM: Virtual GIF supported Jul 15 11:30:52.819926 kernel: EDAC MC: Ver: 3.0.0 Jul 15 11:30:52.846263 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:30:52.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.848320 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:30:52.856310 lvm[1059]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:30:52.879520 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:30:52.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.880495 systemd[1]: Reached target cryptsetup.target. Jul 15 11:30:52.882143 systemd[1]: Starting lvm2-activation.service... Jul 15 11:30:52.886045 lvm[1060]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:30:52.912501 systemd[1]: Finished lvm2-activation.service. Jul 15 11:30:52.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.913450 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:30:52.914314 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:30:52.914343 systemd[1]: Reached target local-fs.target. Jul 15 11:30:52.915159 systemd[1]: Reached target machines.target. Jul 15 11:30:52.917000 systemd[1]: Starting ldconfig.service... Jul 15 11:30:52.917989 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:30:52.918059 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:30:52.919021 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:30:52.920701 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:30:52.923383 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:30:52.925710 systemd[1]: Starting systemd-sysext.service... Jul 15 11:30:52.926810 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1062 (bootctl) Jul 15 11:30:52.927968 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:30:52.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.933005 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:30:52.935850 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:30:52.939467 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:30:52.939603 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:30:52.949924 kernel: loop0: detected capacity change from 0 to 229808 Jul 15 11:30:52.971329 systemd-fsck[1071]: fsck.fat 4.2 (2021-01-31) Jul 15 11:30:52.971329 systemd-fsck[1071]: /dev/vda1: 791 files, 120745/258078 clusters Jul 15 11:30:52.973126 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:30:52.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:52.976240 systemd[1]: Mounting boot.mount... Jul 15 11:30:53.241805 systemd[1]: Mounted boot.mount. Jul 15 11:30:53.250355 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:30:53.251925 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:30:53.252747 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:30:53.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.255067 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:30:53.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.267913 kernel: loop1: detected capacity change from 0 to 229808 Jul 15 11:30:53.272597 (sd-sysext)[1075]: Using extensions 'kubernetes'. Jul 15 11:30:53.272944 (sd-sysext)[1075]: Merged extensions into '/usr'. Jul 15 11:30:53.291115 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:53.292674 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:30:53.293804 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.295119 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:30:53.297137 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:30:53.299316 systemd[1]: Starting modprobe@loop.service... Jul 15 11:30:53.300107 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.300274 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:30:53.300417 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:53.303140 ldconfig[1061]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:30:53.303664 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:30:53.304850 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:30:53.304995 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:30:53.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.306305 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:30:53.306440 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:30:53.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.308037 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:30:53.308168 systemd[1]: Finished modprobe@loop.service. Jul 15 11:30:53.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.309435 systemd[1]: Finished ldconfig.service. Jul 15 11:30:53.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.310556 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:30:53.310647 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.311530 systemd[1]: Finished systemd-sysext.service. Jul 15 11:30:53.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.313343 systemd[1]: Starting ensure-sysext.service... Jul 15 11:30:53.315333 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:30:53.320556 systemd[1]: Reloading. Jul 15 11:30:53.328194 systemd-tmpfiles[1082]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:30:53.330188 systemd-tmpfiles[1082]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:30:53.334192 systemd-tmpfiles[1082]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:30:53.366408 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2025-07-15T11:30:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:30:53.366759 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2025-07-15T11:30:53Z" level=info msg="torcx already run" Jul 15 11:30:53.430193 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:30:53.430207 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:30:53.446918 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:30:53.498000 audit: BPF prog-id=24 op=LOAD Jul 15 11:30:53.498000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:30:53.498000 audit: BPF prog-id=25 op=LOAD Jul 15 11:30:53.498000 audit: BPF prog-id=26 op=LOAD Jul 15 11:30:53.498000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:30:53.498000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:30:53.500000 audit: BPF prog-id=27 op=LOAD Jul 15 11:30:53.500000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:30:53.500000 audit: BPF prog-id=28 op=LOAD Jul 15 11:30:53.500000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:30:53.501000 audit: BPF prog-id=29 op=LOAD Jul 15 11:30:53.501000 audit: BPF prog-id=30 op=LOAD Jul 15 11:30:53.501000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:30:53.501000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:30:53.502000 audit: BPF prog-id=31 op=LOAD Jul 15 11:30:53.502000 audit: BPF prog-id=32 op=LOAD Jul 15 11:30:53.502000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:30:53.502000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:30:53.505285 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:30:53.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.509287 systemd[1]: Starting audit-rules.service... Jul 15 11:30:53.511068 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:30:53.512984 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:30:53.513000 audit: BPF prog-id=33 op=LOAD Jul 15 11:30:53.515336 systemd[1]: Starting systemd-resolved.service... Jul 15 11:30:53.516000 audit: BPF prog-id=34 op=LOAD Jul 15 11:30:53.518106 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:30:53.519800 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:30:53.521063 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:30:53.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.522000 audit[1155]: SYSTEM_BOOT pid=1155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.528401 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:53.528616 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.529819 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:30:53.531625 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:30:53.533563 systemd[1]: Starting modprobe@loop.service... Jul 15 11:30:53.534319 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.534445 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:30:53.534556 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:30:53.534633 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:53.535651 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:30:53.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.537067 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:30:53.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.538622 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:30:53.538773 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:30:53.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.540223 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:30:53.540339 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:30:53.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.541606 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:30:53.541718 systemd[1]: Finished modprobe@loop.service. Jul 15 11:30:53.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.543698 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:30:53.543804 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.545400 systemd[1]: Starting systemd-update-done.service... Jul 15 11:30:53.548172 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:53.548357 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.549627 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:30:53.551644 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:30:53.553620 systemd[1]: Starting modprobe@loop.service... Jul 15 11:30:53.554833 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.554958 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:30:53.555043 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:30:53.555102 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:53.555909 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:30:53.556026 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:30:53.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.558255 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:30:53.558368 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:30:53.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.559697 systemd[1]: Finished systemd-update-done.service. Jul 15 11:30:53.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.561011 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:30:53.561112 systemd[1]: Finished modprobe@loop.service. Jul 15 11:30:53.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.563257 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:30:53.563338 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.563000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:30:53.563000 audit[1172]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc8dbfd180 a2=420 a3=0 items=0 ppid=1144 pid=1172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:53.563000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:30:53.565299 augenrules[1172]: No rules Jul 15 11:30:53.566772 systemd[1]: Finished audit-rules.service. Jul 15 11:30:53.567811 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:53.568021 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.569250 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:30:53.571124 systemd[1]: Starting modprobe@drm.service... Jul 15 11:30:53.573098 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:30:53.575009 systemd[1]: Starting modprobe@loop.service... Jul 15 11:30:53.575922 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:30:53.576055 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:30:53.577299 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:30:53.578407 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:30:53.578538 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:30:54.721820 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:30:54.721959 systemd-timesyncd[1154]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 15 11:30:54.722278 systemd-timesyncd[1154]: Initial clock synchronization to Tue 2025-07-15 11:30:54.721770 UTC. Jul 15 11:30:54.723540 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:30:54.723667 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:30:54.724889 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:30:54.725041 systemd[1]: Finished modprobe@drm.service. Jul 15 11:30:54.726357 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:30:54.726514 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:30:54.728652 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:30:54.728756 systemd[1]: Finished modprobe@loop.service. Jul 15 11:30:54.730115 systemd[1]: Reached target time-set.target. Jul 15 11:30:54.731053 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:30:54.731078 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:30:54.731414 systemd[1]: Finished ensure-sysext.service. Jul 15 11:30:54.737416 systemd-resolved[1148]: Positive Trust Anchors: Jul 15 11:30:54.737429 systemd-resolved[1148]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:30:54.737454 systemd-resolved[1148]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:30:54.744116 systemd-resolved[1148]: Defaulting to hostname 'linux'. Jul 15 11:30:54.745622 systemd[1]: Started systemd-resolved.service. Jul 15 11:30:54.746509 systemd[1]: Reached target network.target. Jul 15 11:30:54.747311 systemd[1]: Reached target nss-lookup.target. Jul 15 11:30:54.748115 systemd[1]: Reached target sysinit.target. Jul 15 11:30:54.748971 systemd[1]: Started motdgen.path. Jul 15 11:30:54.749682 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:30:54.750868 systemd[1]: Started logrotate.timer. Jul 15 11:30:54.751666 systemd[1]: Started mdadm.timer. Jul 15 11:30:54.752341 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:30:54.753192 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:30:54.753220 systemd[1]: Reached target paths.target. Jul 15 11:30:54.753985 systemd[1]: Reached target timers.target. Jul 15 11:30:54.755015 systemd[1]: Listening on dbus.socket. Jul 15 11:30:54.756604 systemd[1]: Starting docker.socket... Jul 15 11:30:54.759512 systemd[1]: Listening on sshd.socket. Jul 15 11:30:54.760334 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:30:54.760679 systemd[1]: Listening on docker.socket. Jul 15 11:30:54.761485 systemd[1]: Reached target sockets.target. Jul 15 11:30:54.762273 systemd[1]: Reached target basic.target. Jul 15 11:30:54.763070 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:30:54.763095 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:30:54.764023 systemd[1]: Starting containerd.service... Jul 15 11:30:54.765780 systemd[1]: Starting dbus.service... Jul 15 11:30:54.767408 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:30:54.769432 systemd[1]: Starting extend-filesystems.service... Jul 15 11:30:54.770372 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:30:54.771517 systemd[1]: Starting motdgen.service... Jul 15 11:30:54.774040 systemd[1]: Starting prepare-helm.service... Jul 15 11:30:54.775206 jq[1187]: false Jul 15 11:30:54.775781 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:30:54.780023 systemd[1]: Starting sshd-keygen.service... Jul 15 11:30:54.783144 systemd[1]: Starting systemd-logind.service... Jul 15 11:30:54.786069 dbus-daemon[1186]: [system] SELinux support is enabled Jul 15 11:30:54.783914 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:30:54.783975 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:30:54.784327 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:30:54.800864 jq[1205]: true Jul 15 11:30:54.784952 systemd[1]: Starting update-engine.service... Jul 15 11:30:54.786638 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:30:54.802991 tar[1208]: linux-amd64/LICENSE Jul 15 11:30:54.802991 tar[1208]: linux-amd64/helm Jul 15 11:30:54.788204 systemd[1]: Started dbus.service. Jul 15 11:30:54.803422 jq[1209]: true Jul 15 11:30:54.791504 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:30:54.791818 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:30:54.792076 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:30:54.792228 systemd[1]: Finished motdgen.service. Jul 15 11:30:54.793789 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:30:54.793943 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:30:54.797035 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:30:54.797072 systemd[1]: Reached target system-config.target. Jul 15 11:30:54.797983 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:30:54.797999 systemd[1]: Reached target user-config.target. Jul 15 11:30:54.808476 extend-filesystems[1188]: Found loop1 Jul 15 11:30:54.808476 extend-filesystems[1188]: Found sr0 Jul 15 11:30:54.808476 extend-filesystems[1188]: Found vda Jul 15 11:30:54.808476 extend-filesystems[1188]: Found vda1 Jul 15 11:30:54.808476 extend-filesystems[1188]: Found vda2 Jul 15 11:30:54.808476 extend-filesystems[1188]: Found vda3 Jul 15 11:30:54.808476 extend-filesystems[1188]: Found usr Jul 15 11:30:54.808476 extend-filesystems[1188]: Found vda4 Jul 15 11:30:54.808476 extend-filesystems[1188]: Found vda6 Jul 15 11:30:54.808476 extend-filesystems[1188]: Found vda7 Jul 15 11:30:54.808476 extend-filesystems[1188]: Found vda9 Jul 15 11:30:54.808476 extend-filesystems[1188]: Checking size of /dev/vda9 Jul 15 11:30:54.836205 update_engine[1202]: I0715 11:30:54.818819 1202 main.cc:92] Flatcar Update Engine starting Jul 15 11:30:54.836205 update_engine[1202]: I0715 11:30:54.820678 1202 update_check_scheduler.cc:74] Next update check in 5m58s Jul 15 11:30:54.836703 env[1210]: time="2025-07-15T11:30:54.825036155Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:30:54.820619 systemd[1]: Started update-engine.service. Jul 15 11:30:54.829800 systemd[1]: Started locksmithd.service. Jul 15 11:30:54.839386 extend-filesystems[1188]: Resized partition /dev/vda9 Jul 15 11:30:54.844033 extend-filesystems[1240]: resize2fs 1.46.5 (30-Dec-2021) Jul 15 11:30:54.845387 systemd-logind[1201]: Watching system buttons on /dev/input/event1 (Power Button) Jul 15 11:30:54.845418 systemd-logind[1201]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 15 11:30:54.846468 systemd-logind[1201]: New seat seat0. Jul 15 11:30:54.849860 systemd[1]: Started systemd-logind.service. Jul 15 11:30:54.851055 bash[1236]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:30:54.851639 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:30:54.859145 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 15 11:30:54.872540 env[1210]: time="2025-07-15T11:30:54.872490214Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:30:54.872677 env[1210]: time="2025-07-15T11:30:54.872648491Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:54.875714 env[1210]: time="2025-07-15T11:30:54.875677800Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:30:54.875714 env[1210]: time="2025-07-15T11:30:54.875708207Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:54.892804 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 15 11:30:54.892864 extend-filesystems[1240]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 15 11:30:54.892864 extend-filesystems[1240]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 15 11:30:54.892864 extend-filesystems[1240]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 15 11:30:54.903474 extend-filesystems[1188]: Resized filesystem in /dev/vda9 Jul 15 11:30:54.894747 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.892988661Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.893008929Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.893021192Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.893030780Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.893095331Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.893313360Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.893425080Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.893438294Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.893479932Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:30:54.904599 env[1210]: time="2025-07-15T11:30:54.893489811Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:30:54.894907 systemd[1]: Finished extend-filesystems.service. Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907472664Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907529671Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907541873Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907582480Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907600974Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907614329Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907625961Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907640649Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907652781Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907670394Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907682778Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907694520Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907808483Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:30:54.908146 env[1210]: time="2025-07-15T11:30:54.907891108Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908502434Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908537249Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908548280Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908595188Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908607772Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908618802Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908628651Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908639561Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908650271Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908661102Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908673335Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908686239Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908797247Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908811313Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909599 env[1210]: time="2025-07-15T11:30:54.908821763Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.909026 locksmithd[1235]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:30:54.910099 env[1210]: time="2025-07-15T11:30:54.908831641Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:30:54.910099 env[1210]: time="2025-07-15T11:30:54.908848603Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:30:54.910099 env[1210]: time="2025-07-15T11:30:54.908865835Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:30:54.910099 env[1210]: time="2025-07-15T11:30:54.908887085Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:30:54.910099 env[1210]: time="2025-07-15T11:30:54.908922271Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:30:54.910222 env[1210]: time="2025-07-15T11:30:54.909105815Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:30:54.910222 env[1210]: time="2025-07-15T11:30:54.909178001Z" level=info msg="Connect containerd service" Jul 15 11:30:54.910222 env[1210]: time="2025-07-15T11:30:54.909212365Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:30:54.910770 env[1210]: time="2025-07-15T11:30:54.910649269Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:30:54.911301 env[1210]: time="2025-07-15T11:30:54.910985158Z" level=info msg="Start subscribing containerd event" Jul 15 11:30:54.911301 env[1210]: time="2025-07-15T11:30:54.911055400Z" level=info msg="Start recovering state" Jul 15 11:30:54.911301 env[1210]: time="2025-07-15T11:30:54.911005917Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:30:54.911301 env[1210]: time="2025-07-15T11:30:54.911116605Z" level=info msg="Start event monitor" Jul 15 11:30:54.911301 env[1210]: time="2025-07-15T11:30:54.911151250Z" level=info msg="Start snapshots syncer" Jul 15 11:30:54.911301 env[1210]: time="2025-07-15T11:30:54.911161098Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:30:54.911301 env[1210]: time="2025-07-15T11:30:54.911169364Z" level=info msg="Start streaming server" Jul 15 11:30:54.911301 env[1210]: time="2025-07-15T11:30:54.911308825Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:30:54.911447 systemd[1]: Started containerd.service. Jul 15 11:30:54.912211 env[1210]: time="2025-07-15T11:30:54.912185258Z" level=info msg="containerd successfully booted in 0.087696s" Jul 15 11:30:55.233083 tar[1208]: linux-amd64/README.md Jul 15 11:30:55.237837 systemd[1]: Finished prepare-helm.service. Jul 15 11:30:55.341255 systemd-networkd[1032]: eth0: Gained IPv6LL Jul 15 11:30:55.343271 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:30:55.344501 systemd[1]: Reached target network-online.target. Jul 15 11:30:55.346625 systemd[1]: Starting kubelet.service... Jul 15 11:30:55.769132 sshd_keygen[1206]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:30:55.787812 systemd[1]: Finished sshd-keygen.service. Jul 15 11:30:55.790112 systemd[1]: Starting issuegen.service... Jul 15 11:30:55.794443 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:30:55.794574 systemd[1]: Finished issuegen.service. Jul 15 11:30:55.796523 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:30:55.801854 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:30:55.803871 systemd[1]: Started getty@tty1.service. Jul 15 11:30:55.806110 systemd[1]: Started serial-getty@ttyS0.service. Jul 15 11:30:55.807210 systemd[1]: Reached target getty.target. Jul 15 11:30:56.023298 systemd[1]: Started kubelet.service. Jul 15 11:30:56.024612 systemd[1]: Reached target multi-user.target. Jul 15 11:30:56.026682 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:30:56.032747 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:30:56.032879 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:30:56.034012 systemd[1]: Startup finished in 772ms (kernel) + 4.616s (initrd) + 5.460s (userspace) = 10.848s. Jul 15 11:30:56.454986 kubelet[1267]: E0715 11:30:56.454923 1267 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:30:56.456957 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:30:56.457081 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:30:56.457328 systemd[1]: kubelet.service: Consumed 1.005s CPU time. Jul 15 11:30:59.073222 systemd[1]: Created slice system-sshd.slice. Jul 15 11:30:59.074402 systemd[1]: Started sshd@0-10.0.0.76:22-10.0.0.1:38048.service. Jul 15 11:30:59.115860 sshd[1276]: Accepted publickey for core from 10.0.0.1 port 38048 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:30:59.117369 sshd[1276]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:59.126382 systemd-logind[1201]: New session 1 of user core. Jul 15 11:30:59.127605 systemd[1]: Created slice user-500.slice. Jul 15 11:30:59.128742 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:30:59.136661 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:30:59.138140 systemd[1]: Starting user@500.service... Jul 15 11:30:59.140698 (systemd)[1279]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:59.220181 systemd[1279]: Queued start job for default target default.target. Jul 15 11:30:59.220787 systemd[1279]: Reached target paths.target. Jul 15 11:30:59.220810 systemd[1279]: Reached target sockets.target. Jul 15 11:30:59.220828 systemd[1279]: Reached target timers.target. Jul 15 11:30:59.220845 systemd[1279]: Reached target basic.target. Jul 15 11:30:59.220895 systemd[1279]: Reached target default.target. Jul 15 11:30:59.220930 systemd[1279]: Startup finished in 74ms. Jul 15 11:30:59.220974 systemd[1]: Started user@500.service. Jul 15 11:30:59.221974 systemd[1]: Started session-1.scope. Jul 15 11:30:59.273409 systemd[1]: Started sshd@1-10.0.0.76:22-10.0.0.1:38052.service. Jul 15 11:30:59.316798 sshd[1288]: Accepted publickey for core from 10.0.0.1 port 38052 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:30:59.318438 sshd[1288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:59.322447 systemd-logind[1201]: New session 2 of user core. Jul 15 11:30:59.323909 systemd[1]: Started session-2.scope. Jul 15 11:30:59.377809 sshd[1288]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:59.380566 systemd[1]: sshd@1-10.0.0.76:22-10.0.0.1:38052.service: Deactivated successfully. Jul 15 11:30:59.381405 systemd[1]: session-2.scope: Deactivated successfully. Jul 15 11:30:59.381909 systemd-logind[1201]: Session 2 logged out. Waiting for processes to exit. Jul 15 11:30:59.383116 systemd[1]: Started sshd@2-10.0.0.76:22-10.0.0.1:38068.service. Jul 15 11:30:59.383904 systemd-logind[1201]: Removed session 2. Jul 15 11:30:59.420633 sshd[1294]: Accepted publickey for core from 10.0.0.1 port 38068 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:30:59.421832 sshd[1294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:59.425110 systemd-logind[1201]: New session 3 of user core. Jul 15 11:30:59.426036 systemd[1]: Started session-3.scope. Jul 15 11:30:59.475305 sshd[1294]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:59.478360 systemd[1]: sshd@2-10.0.0.76:22-10.0.0.1:38068.service: Deactivated successfully. Jul 15 11:30:59.478934 systemd[1]: session-3.scope: Deactivated successfully. Jul 15 11:30:59.479480 systemd-logind[1201]: Session 3 logged out. Waiting for processes to exit. Jul 15 11:30:59.480566 systemd[1]: Started sshd@3-10.0.0.76:22-10.0.0.1:38084.service. Jul 15 11:30:59.481701 systemd-logind[1201]: Removed session 3. Jul 15 11:30:59.519339 sshd[1300]: Accepted publickey for core from 10.0.0.1 port 38084 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:30:59.520496 sshd[1300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:59.523630 systemd-logind[1201]: New session 4 of user core. Jul 15 11:30:59.524486 systemd[1]: Started session-4.scope. Jul 15 11:30:59.578856 sshd[1300]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:59.581837 systemd[1]: sshd@3-10.0.0.76:22-10.0.0.1:38084.service: Deactivated successfully. Jul 15 11:30:59.582524 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:30:59.583104 systemd-logind[1201]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:30:59.584354 systemd[1]: Started sshd@4-10.0.0.76:22-10.0.0.1:38098.service. Jul 15 11:30:59.585139 systemd-logind[1201]: Removed session 4. Jul 15 11:30:59.626815 sshd[1306]: Accepted publickey for core from 10.0.0.1 port 38098 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:30:59.628443 sshd[1306]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:59.631696 systemd-logind[1201]: New session 5 of user core. Jul 15 11:30:59.632502 systemd[1]: Started session-5.scope. Jul 15 11:30:59.688969 sudo[1309]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:30:59.689191 sudo[1309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:30:59.698388 dbus-daemon[1186]: н\u0001\u0011\xf5U: received setenforce notice (enforcing=-1317672608) Jul 15 11:30:59.700489 sudo[1309]: pam_unix(sudo:session): session closed for user root Jul 15 11:30:59.702393 sshd[1306]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:59.706235 systemd[1]: sshd@4-10.0.0.76:22-10.0.0.1:38098.service: Deactivated successfully. Jul 15 11:30:59.706971 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:30:59.707678 systemd-logind[1201]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:30:59.709282 systemd[1]: Started sshd@5-10.0.0.76:22-10.0.0.1:38102.service. Jul 15 11:30:59.710084 systemd-logind[1201]: Removed session 5. Jul 15 11:30:59.749547 sshd[1313]: Accepted publickey for core from 10.0.0.1 port 38102 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:30:59.750882 sshd[1313]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:59.754592 systemd-logind[1201]: New session 6 of user core. Jul 15 11:30:59.755234 systemd[1]: Started session-6.scope. Jul 15 11:30:59.808718 sudo[1317]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:30:59.809011 sudo[1317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:30:59.811553 sudo[1317]: pam_unix(sudo:session): session closed for user root Jul 15 11:30:59.815498 sudo[1316]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:30:59.815752 sudo[1316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:30:59.824390 systemd[1]: Stopping audit-rules.service... Jul 15 11:30:59.824000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:30:59.825928 auditctl[1320]: No rules Jul 15 11:30:59.826918 kernel: kauditd_printk_skb: 271 callbacks suppressed Jul 15 11:30:59.826954 kernel: audit: type=1305 audit(1752579059.824:196): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:30:59.827112 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:30:59.827269 systemd[1]: Stopped audit-rules.service. Jul 15 11:30:59.828461 systemd[1]: Starting audit-rules.service... Jul 15 11:30:59.824000 audit[1320]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffff0d8bfc0 a2=420 a3=0 items=0 ppid=1 pid=1320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:59.835390 kernel: audit: type=1300 audit(1752579059.824:196): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffff0d8bfc0 a2=420 a3=0 items=0 ppid=1 pid=1320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:59.824000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:30:59.837513 kernel: audit: type=1327 audit(1752579059.824:196): proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:30:59.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.841575 kernel: audit: type=1131 audit(1752579059.826:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.845479 augenrules[1337]: No rules Jul 15 11:30:59.846089 systemd[1]: Finished audit-rules.service. Jul 15 11:30:59.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.846954 sudo[1316]: pam_unix(sudo:session): session closed for user root Jul 15 11:30:59.845000 audit[1316]: USER_END pid=1316 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.850495 sshd[1313]: pam_unix(sshd:session): session closed for user core Jul 15 11:30:59.853188 systemd[1]: sshd@5-10.0.0.76:22-10.0.0.1:38102.service: Deactivated successfully. Jul 15 11:30:59.853684 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:30:59.854137 systemd-logind[1201]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:30:59.856145 kernel: audit: type=1130 audit(1752579059.845:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.856196 kernel: audit: type=1106 audit(1752579059.845:199): pid=1316 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.856226 kernel: audit: type=1104 audit(1752579059.845:200): pid=1316 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.845000 audit[1316]: CRED_DISP pid=1316 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.855154 systemd[1]: Started sshd@6-10.0.0.76:22-10.0.0.1:38116.service. Jul 15 11:30:59.855854 systemd-logind[1201]: Removed session 6. Jul 15 11:30:59.850000 audit[1313]: USER_END pid=1313 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:59.865204 kernel: audit: type=1106 audit(1752579059.850:201): pid=1313 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:59.865318 kernel: audit: type=1104 audit(1752579059.850:202): pid=1313 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:59.850000 audit[1313]: CRED_DISP pid=1313 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:59.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.76:22-10.0.0.1:38102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.874011 kernel: audit: type=1131 audit(1752579059.852:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.76:22-10.0.0.1:38102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.76:22-10.0.0.1:38116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.898000 audit[1343]: USER_ACCT pid=1343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:59.899639 sshd[1343]: Accepted publickey for core from 10.0.0.1 port 38116 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:30:59.899000 audit[1343]: CRED_ACQ pid=1343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:59.899000 audit[1343]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3899d860 a2=3 a3=0 items=0 ppid=1 pid=1343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:59.899000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:30:59.900776 sshd[1343]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:59.904110 systemd-logind[1201]: New session 7 of user core. Jul 15 11:30:59.905041 systemd[1]: Started session-7.scope. Jul 15 11:30:59.908000 audit[1343]: USER_START pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:59.909000 audit[1345]: CRED_ACQ pid=1345 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:30:59.955000 audit[1346]: USER_ACCT pid=1346 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.955000 audit[1346]: CRED_REFR pid=1346 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.956951 sudo[1346]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:30:59.957159 sudo[1346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:30:59.957000 audit[1346]: USER_START pid=1346 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:30:59.979992 systemd[1]: Starting docker.service... Jul 15 11:31:00.013533 env[1358]: time="2025-07-15T11:31:00.013471718Z" level=info msg="Starting up" Jul 15 11:31:00.014833 env[1358]: time="2025-07-15T11:31:00.014812141Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:31:00.014833 env[1358]: time="2025-07-15T11:31:00.014827400Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:31:00.014928 env[1358]: time="2025-07-15T11:31:00.014842208Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:31:00.014928 env[1358]: time="2025-07-15T11:31:00.014851926Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:31:00.016604 env[1358]: time="2025-07-15T11:31:00.016573723Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:31:00.016604 env[1358]: time="2025-07-15T11:31:00.016591477Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:31:00.016604 env[1358]: time="2025-07-15T11:31:00.016603489Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:31:00.016689 env[1358]: time="2025-07-15T11:31:00.016611594Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:31:00.760307 env[1358]: time="2025-07-15T11:31:00.760261523Z" level=info msg="Loading containers: start." Jul 15 11:31:00.810000 audit[1392]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.810000 audit[1392]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd12e4e120 a2=0 a3=7ffd12e4e10c items=0 ppid=1358 pid=1392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.810000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:31:00.812000 audit[1394]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.812000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffff5ec5140 a2=0 a3=7ffff5ec512c items=0 ppid=1358 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.812000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:31:00.814000 audit[1396]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.814000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd164e7390 a2=0 a3=7ffd164e737c items=0 ppid=1358 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.814000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:31:00.816000 audit[1398]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.816000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff8543aa80 a2=0 a3=7fff8543aa6c items=0 ppid=1358 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.816000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:31:00.818000 audit[1400]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.818000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe26e014a0 a2=0 a3=7ffe26e0148c items=0 ppid=1358 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.818000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:31:00.836000 audit[1405]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.836000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd25cf94c0 a2=0 a3=7ffd25cf94ac items=0 ppid=1358 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.836000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:31:00.845000 audit[1407]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.845000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff0a45df40 a2=0 a3=7fff0a45df2c items=0 ppid=1358 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.845000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:31:00.847000 audit[1409]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.847000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc33a0f780 a2=0 a3=7ffc33a0f76c items=0 ppid=1358 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.847000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:31:00.850000 audit[1411]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.850000 audit[1411]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffdda8ff1f0 a2=0 a3=7ffdda8ff1dc items=0 ppid=1358 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.850000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:00.858000 audit[1415]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.858000 audit[1415]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe1030d8e0 a2=0 a3=7ffe1030d8cc items=0 ppid=1358 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.858000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:00.866000 audit[1416]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.866000 audit[1416]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffedeaac280 a2=0 a3=7ffedeaac26c items=0 ppid=1358 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.866000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:00.877163 kernel: Initializing XFRM netlink socket Jul 15 11:31:00.904892 env[1358]: time="2025-07-15T11:31:00.904834856Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:31:00.920000 audit[1424]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.920000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd79204380 a2=0 a3=7ffd7920436c items=0 ppid=1358 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.920000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:31:00.931000 audit[1427]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.931000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc30e71b30 a2=0 a3=7ffc30e71b1c items=0 ppid=1358 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.931000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:31:00.934000 audit[1430]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.934000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdbadc5f80 a2=0 a3=7ffdbadc5f6c items=0 ppid=1358 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.934000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:31:00.936000 audit[1432]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.936000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffeea599e20 a2=0 a3=7ffeea599e0c items=0 ppid=1358 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.936000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:31:00.938000 audit[1434]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.938000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffddab2d2a0 a2=0 a3=7ffddab2d28c items=0 ppid=1358 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.938000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:31:00.940000 audit[1436]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.940000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffefdfa54a0 a2=0 a3=7ffefdfa548c items=0 ppid=1358 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.940000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:31:00.942000 audit[1438]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.942000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fffbdb0e620 a2=0 a3=7fffbdb0e60c items=0 ppid=1358 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:31:00.950000 audit[1441]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.950000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff50c1e710 a2=0 a3=7fff50c1e6fc items=0 ppid=1358 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.950000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:31:00.952000 audit[1443]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.952000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffec21e2df0 a2=0 a3=7ffec21e2ddc items=0 ppid=1358 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.952000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:31:00.954000 audit[1445]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.954000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff538a7030 a2=0 a3=7fff538a701c items=0 ppid=1358 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.954000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:31:00.956000 audit[1447]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.956000 audit[1447]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc779eb150 a2=0 a3=7ffc779eb13c items=0 ppid=1358 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.956000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:31:00.958361 systemd-networkd[1032]: docker0: Link UP Jul 15 11:31:00.968000 audit[1452]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.968000 audit[1452]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd4c1ace40 a2=0 a3=7ffd4c1ace2c items=0 ppid=1358 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.968000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:00.976000 audit[1453]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:00.976000 audit[1453]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff5f47f4b0 a2=0 a3=7fff5f47f49c items=0 ppid=1358 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:00.976000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:31:00.977743 env[1358]: time="2025-07-15T11:31:00.977689172Z" level=info msg="Loading containers: done." Jul 15 11:31:00.986902 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck326153525-merged.mount: Deactivated successfully. Jul 15 11:31:00.990912 env[1358]: time="2025-07-15T11:31:00.990862908Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:31:00.991077 env[1358]: time="2025-07-15T11:31:00.991049417Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:31:00.991189 env[1358]: time="2025-07-15T11:31:00.991166858Z" level=info msg="Daemon has completed initialization" Jul 15 11:31:01.009588 systemd[1]: Started docker.service. Jul 15 11:31:01.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:01.013317 env[1358]: time="2025-07-15T11:31:01.013222955Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:31:01.554227 env[1210]: time="2025-07-15T11:31:01.554160299Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 15 11:31:02.131824 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1096377969.mount: Deactivated successfully. Jul 15 11:31:03.621882 env[1210]: time="2025-07-15T11:31:03.621805325Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:03.623938 env[1210]: time="2025-07-15T11:31:03.623878852Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:03.625482 env[1210]: time="2025-07-15T11:31:03.625442203Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:03.627501 env[1210]: time="2025-07-15T11:31:03.627452411Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:03.628194 env[1210]: time="2025-07-15T11:31:03.628111236Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e\"" Jul 15 11:31:03.628757 env[1210]: time="2025-07-15T11:31:03.628722883Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 15 11:31:06.068581 env[1210]: time="2025-07-15T11:31:06.068505584Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:06.070331 env[1210]: time="2025-07-15T11:31:06.070299718Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:06.072415 env[1210]: time="2025-07-15T11:31:06.072373425Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:06.074318 env[1210]: time="2025-07-15T11:31:06.074275781Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:06.074927 env[1210]: time="2025-07-15T11:31:06.074876968Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2\"" Jul 15 11:31:06.075501 env[1210]: time="2025-07-15T11:31:06.075462937Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 15 11:31:06.686429 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:31:06.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:06.686614 systemd[1]: Stopped kubelet.service. Jul 15 11:31:06.686672 systemd[1]: kubelet.service: Consumed 1.005s CPU time. Jul 15 11:31:06.687570 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 15 11:31:06.687626 kernel: audit: type=1130 audit(1752579066.685:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:06.687984 systemd[1]: Starting kubelet.service... Jul 15 11:31:06.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:06.695632 kernel: audit: type=1131 audit(1752579066.685:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:06.803665 systemd[1]: Started kubelet.service. Jul 15 11:31:06.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:06.807169 kernel: audit: type=1130 audit(1752579066.802:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:07.098012 kubelet[1495]: E0715 11:31:07.097872 1495 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:31:07.100703 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:31:07.100832 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:31:07.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:31:07.105164 kernel: audit: type=1131 audit(1752579067.099:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:31:07.875415 env[1210]: time="2025-07-15T11:31:07.875340374Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:07.877362 env[1210]: time="2025-07-15T11:31:07.877319685Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:07.879176 env[1210]: time="2025-07-15T11:31:07.879150898Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:07.880755 env[1210]: time="2025-07-15T11:31:07.880713276Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:07.881510 env[1210]: time="2025-07-15T11:31:07.881459716Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b\"" Jul 15 11:31:07.881958 env[1210]: time="2025-07-15T11:31:07.881921702Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 15 11:31:09.048579 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1303779824.mount: Deactivated successfully. Jul 15 11:31:10.004821 env[1210]: time="2025-07-15T11:31:10.004762891Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:10.006629 env[1210]: time="2025-07-15T11:31:10.006589415Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:10.008076 env[1210]: time="2025-07-15T11:31:10.008027791Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:10.009549 env[1210]: time="2025-07-15T11:31:10.009524808Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:10.009865 env[1210]: time="2025-07-15T11:31:10.009839728Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19\"" Jul 15 11:31:10.010336 env[1210]: time="2025-07-15T11:31:10.010297556Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 15 11:31:10.528880 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4054243155.mount: Deactivated successfully. Jul 15 11:31:12.107107 env[1210]: time="2025-07-15T11:31:12.107025953Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:12.109307 env[1210]: time="2025-07-15T11:31:12.109249682Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:12.111681 env[1210]: time="2025-07-15T11:31:12.111642958Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:12.113610 env[1210]: time="2025-07-15T11:31:12.113564441Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:12.114413 env[1210]: time="2025-07-15T11:31:12.114360954Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Jul 15 11:31:12.114998 env[1210]: time="2025-07-15T11:31:12.114972871Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:31:12.657933 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2965072109.mount: Deactivated successfully. Jul 15 11:31:12.665511 env[1210]: time="2025-07-15T11:31:12.665452103Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:12.667807 env[1210]: time="2025-07-15T11:31:12.667770379Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:12.669612 env[1210]: time="2025-07-15T11:31:12.669581193Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:12.671054 env[1210]: time="2025-07-15T11:31:12.671027986Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:12.671635 env[1210]: time="2025-07-15T11:31:12.671599206Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 15 11:31:12.672081 env[1210]: time="2025-07-15T11:31:12.672055472Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 15 11:31:15.151278 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1650010833.mount: Deactivated successfully. Jul 15 11:31:17.186592 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:31:17.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:17.186851 systemd[1]: Stopped kubelet.service. Jul 15 11:31:17.188554 systemd[1]: Starting kubelet.service... Jul 15 11:31:17.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:17.194351 kernel: audit: type=1130 audit(1752579077.185:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:17.194420 kernel: audit: type=1131 audit(1752579077.185:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:17.313651 systemd[1]: Started kubelet.service. Jul 15 11:31:17.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:17.319180 kernel: audit: type=1130 audit(1752579077.312:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:17.355702 kubelet[1506]: E0715 11:31:17.355632 1506 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:31:17.358818 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:31:17.358938 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:31:17.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:31:17.363151 kernel: audit: type=1131 audit(1752579077.358:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:31:19.094782 env[1210]: time="2025-07-15T11:31:19.094700026Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:19.099426 env[1210]: time="2025-07-15T11:31:19.099353270Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:19.101731 env[1210]: time="2025-07-15T11:31:19.101665534Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:19.103472 env[1210]: time="2025-07-15T11:31:19.103437456Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:19.104379 env[1210]: time="2025-07-15T11:31:19.104330600Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Jul 15 11:31:22.455593 systemd[1]: Stopped kubelet.service. Jul 15 11:31:22.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:22.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:22.462004 kernel: audit: type=1130 audit(1752579082.454:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:22.462052 kernel: audit: type=1131 audit(1752579082.457:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:22.462329 systemd[1]: Starting kubelet.service... Jul 15 11:31:22.484167 systemd[1]: Reloading. Jul 15 11:31:22.548375 /usr/lib/systemd/system-generators/torcx-generator[1563]: time="2025-07-15T11:31:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:31:22.548814 /usr/lib/systemd/system-generators/torcx-generator[1563]: time="2025-07-15T11:31:22Z" level=info msg="torcx already run" Jul 15 11:31:22.819186 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:31:22.819203 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:31:22.836320 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:31:22.905777 kernel: audit: type=1400 audit(1752579082.895:248): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.905895 kernel: audit: type=1400 audit(1752579082.895:249): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.905926 kernel: audit: type=1400 audit(1752579082.895:250): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.909352 kernel: audit: type=1400 audit(1752579082.895:251): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.909436 kernel: audit: type=1400 audit(1752579082.895:252): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.912562 kernel: audit: type=1400 audit(1752579082.895:253): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.915775 kernel: audit: type=1400 audit(1752579082.895:254): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.918939 kernel: audit: type=1400 audit(1752579082.895:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit: BPF prog-id=40 op=LOAD Jul 15 11:31:22.901000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit: BPF prog-id=41 op=LOAD Jul 15 11:31:22.904000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit: BPF prog-id=42 op=LOAD Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.908000 audit: BPF prog-id=43 op=LOAD Jul 15 11:31:22.908000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:31:22.908000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:31:22.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit: BPF prog-id=44 op=LOAD Jul 15 11:31:22.911000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.917000 audit: BPF prog-id=45 op=LOAD Jul 15 11:31:22.917000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:31:22.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.920000 audit: BPF prog-id=46 op=LOAD Jul 15 11:31:22.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.921000 audit: BPF prog-id=47 op=LOAD Jul 15 11:31:22.921000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:31:22.921000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.922000 audit: BPF prog-id=48 op=LOAD Jul 15 11:31:22.922000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:31:22.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit: BPF prog-id=49 op=LOAD Jul 15 11:31:22.924000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit: BPF prog-id=50 op=LOAD Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.924000 audit: BPF prog-id=51 op=LOAD Jul 15 11:31:22.924000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:31:22.924000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit: BPF prog-id=52 op=LOAD Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.925000 audit: BPF prog-id=53 op=LOAD Jul 15 11:31:22.925000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:31:22.925000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:22.926000 audit: BPF prog-id=54 op=LOAD Jul 15 11:31:22.926000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:31:22.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:22.936865 systemd[1]: Started kubelet.service. Jul 15 11:31:22.939592 systemd[1]: Stopping kubelet.service... Jul 15 11:31:22.939858 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:31:22.940011 systemd[1]: Stopped kubelet.service. Jul 15 11:31:22.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:22.941396 systemd[1]: Starting kubelet.service... Jul 15 11:31:23.030357 systemd[1]: Started kubelet.service. Jul 15 11:31:23.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:23.064985 kubelet[1610]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:31:23.064985 kubelet[1610]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:31:23.064985 kubelet[1610]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:31:23.065407 kubelet[1610]: I0715 11:31:23.065007 1610 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:31:23.682758 kubelet[1610]: I0715 11:31:23.682713 1610 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 15 11:31:23.682758 kubelet[1610]: I0715 11:31:23.682740 1610 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:31:23.683032 kubelet[1610]: I0715 11:31:23.682925 1610 server.go:956] "Client rotation is on, will bootstrap in background" Jul 15 11:31:23.705098 kubelet[1610]: I0715 11:31:23.705055 1610 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:31:23.705673 kubelet[1610]: E0715 11:31:23.705629 1610 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.76:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 15 11:31:23.710164 kubelet[1610]: E0715 11:31:23.710117 1610 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:31:23.710164 kubelet[1610]: I0715 11:31:23.710151 1610 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:31:23.713743 kubelet[1610]: I0715 11:31:23.713710 1610 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:31:23.713950 kubelet[1610]: I0715 11:31:23.713917 1610 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:31:23.714103 kubelet[1610]: I0715 11:31:23.713940 1610 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:31:23.714103 kubelet[1610]: I0715 11:31:23.714104 1610 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:31:23.714283 kubelet[1610]: I0715 11:31:23.714115 1610 container_manager_linux.go:303] "Creating device plugin manager" Jul 15 11:31:23.714283 kubelet[1610]: I0715 11:31:23.714256 1610 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:31:23.717773 kubelet[1610]: I0715 11:31:23.717751 1610 kubelet.go:480] "Attempting to sync node with API server" Jul 15 11:31:23.717820 kubelet[1610]: I0715 11:31:23.717794 1610 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:31:23.717855 kubelet[1610]: I0715 11:31:23.717824 1610 kubelet.go:386] "Adding apiserver pod source" Jul 15 11:31:23.717855 kubelet[1610]: I0715 11:31:23.717839 1610 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:31:23.741791 kubelet[1610]: E0715 11:31:23.741740 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.76:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 15 11:31:23.741940 kubelet[1610]: E0715 11:31:23.741801 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.76:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 15 11:31:23.742921 kubelet[1610]: I0715 11:31:23.742898 1610 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:31:23.743666 kubelet[1610]: I0715 11:31:23.743633 1610 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 15 11:31:23.744152 kubelet[1610]: W0715 11:31:23.744133 1610 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:31:23.746031 kubelet[1610]: I0715 11:31:23.746009 1610 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:31:23.746095 kubelet[1610]: I0715 11:31:23.746049 1610 server.go:1289] "Started kubelet" Jul 15 11:31:23.747078 kubelet[1610]: I0715 11:31:23.746278 1610 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:31:23.746000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.746000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:31:23.746000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00066fbc0 a1=c0005846a8 a2=c00066fb90 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.746000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:31:23.748229 kubelet[1610]: I0715 11:31:23.747932 1610 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:31:23.748229 kubelet[1610]: I0715 11:31:23.747991 1610 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:31:23.746000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:23.746000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:31:23.746000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c0ad80 a1=c0005846c0 a2=c00066fc50 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.746000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:31:23.748460 kubelet[1610]: I0715 11:31:23.748290 1610 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:31:23.749386 kubelet[1610]: I0715 11:31:23.749367 1610 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:31:23.751479 kubelet[1610]: I0715 11:31:23.751438 1610 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:31:23.752304 kubelet[1610]: I0715 11:31:23.752281 1610 server.go:317] "Adding debug handlers to kubelet server" Jul 15 11:31:23.753118 kubelet[1610]: E0715 11:31:23.750344 1610 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.76:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.76:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.185269641f7624c5 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:31:23.746026693 +0000 UTC m=+0.712179754,LastTimestamp:2025-07-15 11:31:23.746026693 +0000 UTC m=+0.712179754,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:31:23.753293 kubelet[1610]: E0715 11:31:23.753276 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:23.752000 audit[1627]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:23.752000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdc7b45790 a2=0 a3=7ffdc7b4577c items=0 ppid=1610 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.752000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:31:23.753557 kubelet[1610]: I0715 11:31:23.753304 1610 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:31:23.753557 kubelet[1610]: I0715 11:31:23.753480 1610 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:31:23.753557 kubelet[1610]: I0715 11:31:23.753541 1610 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:31:23.753925 kubelet[1610]: E0715 11:31:23.753888 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.76:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 15 11:31:23.754054 kubelet[1610]: I0715 11:31:23.753954 1610 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:31:23.754054 kubelet[1610]: I0715 11:31:23.754031 1610 factory.go:223] Registration of the systemd container factory successfully Jul 15 11:31:23.754162 kubelet[1610]: I0715 11:31:23.754091 1610 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:31:23.755069 kubelet[1610]: E0715 11:31:23.755041 1610 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:31:23.755166 kubelet[1610]: I0715 11:31:23.755079 1610 factory.go:223] Registration of the containerd container factory successfully Jul 15 11:31:23.755342 kubelet[1610]: E0715 11:31:23.755307 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.76:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.76:6443: connect: connection refused" interval="200ms" Jul 15 11:31:23.754000 audit[1628]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:23.754000 audit[1628]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc428af8e0 a2=0 a3=7ffc428af8cc items=0 ppid=1610 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.754000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:31:23.756000 audit[1630]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:23.756000 audit[1630]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe965040e0 a2=0 a3=7ffe965040cc items=0 ppid=1610 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:31:23.757000 audit[1632]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:23.757000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc398f2040 a2=0 a3=7ffc398f202c items=0 ppid=1610 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.757000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:31:23.763650 kubelet[1610]: I0715 11:31:23.763629 1610 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:31:23.763650 kubelet[1610]: I0715 11:31:23.763642 1610 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:31:23.763650 kubelet[1610]: I0715 11:31:23.763655 1610 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:31:23.763000 audit[1637]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:23.763000 audit[1637]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff33d34df0 a2=0 a3=7fff33d34ddc items=0 ppid=1610 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:31:23.765019 kubelet[1610]: I0715 11:31:23.764993 1610 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 15 11:31:23.764000 audit[1638]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:23.764000 audit[1638]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff6088f700 a2=0 a3=7fff6088f6ec items=0 ppid=1610 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.764000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:31:23.766050 kubelet[1610]: I0715 11:31:23.766032 1610 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 15 11:31:23.764000 audit[1641]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:23.764000 audit[1641]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffec663fcb0 a2=0 a3=7ffec663fc9c items=0 ppid=1610 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.764000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:31:23.766226 kubelet[1610]: I0715 11:31:23.766054 1610 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 15 11:31:23.766226 kubelet[1610]: I0715 11:31:23.766072 1610 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:31:23.766226 kubelet[1610]: I0715 11:31:23.766081 1610 kubelet.go:2436] "Starting kubelet main sync loop" Jul 15 11:31:23.766226 kubelet[1610]: E0715 11:31:23.766119 1610 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:31:23.765000 audit[1644]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:23.765000 audit[1644]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe46877b50 a2=0 a3=7ffe46877b3c items=0 ppid=1610 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.765000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:31:23.766000 audit[1645]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:23.766000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed1b86410 a2=0 a3=7ffed1b863fc items=0 ppid=1610 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.766000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:31:23.766000 audit[1646]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:23.766000 audit[1646]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc00c343a0 a2=0 a3=7ffc00c3438c items=0 ppid=1610 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.766000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:31:23.766000 audit[1647]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:23.766000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffeb13456a0 a2=0 a3=7ffeb134568c items=0 ppid=1610 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.766000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:31:23.768000 audit[1649]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:23.768000 audit[1649]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd6e7336e0 a2=0 a3=7ffd6e7336cc items=0 ppid=1610 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:23.768000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:31:23.853653 kubelet[1610]: E0715 11:31:23.853555 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:23.866855 kubelet[1610]: E0715 11:31:23.866818 1610 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:31:23.954075 kubelet[1610]: E0715 11:31:23.954033 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:23.956545 kubelet[1610]: E0715 11:31:23.956513 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.76:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.76:6443: connect: connection refused" interval="400ms" Jul 15 11:31:24.042990 kubelet[1610]: E0715 11:31:24.042897 1610 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.76:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.76:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.185269641f7624c5 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:31:23.746026693 +0000 UTC m=+0.712179754,LastTimestamp:2025-07-15 11:31:23.746026693 +0000 UTC m=+0.712179754,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:31:24.055096 kubelet[1610]: E0715 11:31:24.055063 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.067535 kubelet[1610]: E0715 11:31:24.067508 1610 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:31:24.155884 kubelet[1610]: E0715 11:31:24.155843 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.256642 kubelet[1610]: E0715 11:31:24.256572 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.357032 kubelet[1610]: E0715 11:31:24.356989 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.357268 kubelet[1610]: E0715 11:31:24.357238 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.76:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.76:6443: connect: connection refused" interval="800ms" Jul 15 11:31:24.457589 kubelet[1610]: E0715 11:31:24.457533 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.467716 kubelet[1610]: E0715 11:31:24.467692 1610 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:31:24.558173 kubelet[1610]: E0715 11:31:24.558089 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.609526 kubelet[1610]: E0715 11:31:24.609485 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.76:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 15 11:31:24.659086 kubelet[1610]: E0715 11:31:24.659048 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.703663 kubelet[1610]: E0715 11:31:24.703634 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.76:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 15 11:31:24.759752 kubelet[1610]: E0715 11:31:24.759720 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.791430 kubelet[1610]: E0715 11:31:24.791395 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.76:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 15 11:31:24.860153 kubelet[1610]: E0715 11:31:24.860009 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.960538 kubelet[1610]: E0715 11:31:24.960466 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:24.970631 kubelet[1610]: I0715 11:31:24.970592 1610 policy_none.go:49] "None policy: Start" Jul 15 11:31:24.970631 kubelet[1610]: I0715 11:31:24.970617 1610 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:31:24.970631 kubelet[1610]: I0715 11:31:24.970629 1610 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:31:25.061161 kubelet[1610]: E0715 11:31:25.061105 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:25.158066 kubelet[1610]: E0715 11:31:25.157937 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.76:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.76:6443: connect: connection refused" interval="1.6s" Jul 15 11:31:25.162057 kubelet[1610]: E0715 11:31:25.162018 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:25.209198 systemd[1]: Created slice kubepods.slice. Jul 15 11:31:25.212963 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:31:25.215423 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:31:25.226794 kubelet[1610]: E0715 11:31:25.226755 1610 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 15 11:31:25.225000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:25.225000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:31:25.225000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d2b230 a1=c000d44390 a2=c000d2b200 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:25.225000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:31:25.227100 kubelet[1610]: E0715 11:31:25.226813 1610 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 15 11:31:25.227100 kubelet[1610]: I0715 11:31:25.226912 1610 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:31:25.227100 kubelet[1610]: I0715 11:31:25.226920 1610 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:31:25.227225 kubelet[1610]: I0715 11:31:25.227143 1610 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:31:25.227824 kubelet[1610]: E0715 11:31:25.227799 1610 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:31:25.227880 kubelet[1610]: E0715 11:31:25.227830 1610 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:31:25.330139 kubelet[1610]: I0715 11:31:25.330076 1610 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:31:25.330455 kubelet[1610]: E0715 11:31:25.330434 1610 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.76:6443/api/v1/nodes\": dial tcp 10.0.0.76:6443: connect: connection refused" node="localhost" Jul 15 11:31:25.340861 kubelet[1610]: E0715 11:31:25.340828 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.76:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 15 11:31:25.363435 kubelet[1610]: I0715 11:31:25.363400 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/dc3908e4852f5d2819e4cf9d8cc8b451-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"dc3908e4852f5d2819e4cf9d8cc8b451\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:25.363435 kubelet[1610]: I0715 11:31:25.363422 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/dc3908e4852f5d2819e4cf9d8cc8b451-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"dc3908e4852f5d2819e4cf9d8cc8b451\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:25.363532 kubelet[1610]: I0715 11:31:25.363437 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/dc3908e4852f5d2819e4cf9d8cc8b451-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"dc3908e4852f5d2819e4cf9d8cc8b451\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:25.531719 kubelet[1610]: I0715 11:31:25.531697 1610 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:31:25.531880 kubelet[1610]: E0715 11:31:25.531854 1610 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.76:6443/api/v1/nodes\": dial tcp 10.0.0.76:6443: connect: connection refused" node="localhost" Jul 15 11:31:25.591021 systemd[1]: Created slice kubepods-burstable-poddc3908e4852f5d2819e4cf9d8cc8b451.slice. Jul 15 11:31:25.598633 kubelet[1610]: E0715 11:31:25.598598 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:31:25.598825 kubelet[1610]: E0715 11:31:25.598791 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:25.599253 env[1210]: time="2025-07-15T11:31:25.599210300Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:dc3908e4852f5d2819e4cf9d8cc8b451,Namespace:kube-system,Attempt:0,}" Jul 15 11:31:25.664512 kubelet[1610]: I0715 11:31:25.664480 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:25.664609 kubelet[1610]: I0715 11:31:25.664516 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:25.664609 kubelet[1610]: I0715 11:31:25.664555 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:25.664609 kubelet[1610]: I0715 11:31:25.664580 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:25.664609 kubelet[1610]: I0715 11:31:25.664604 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:25.720708 kubelet[1610]: E0715 11:31:25.720666 1610 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.76:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 15 11:31:25.764075 kubelet[1610]: E0715 11:31:25.764041 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.76:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 15 11:31:25.852506 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 15 11:31:25.853614 kubelet[1610]: E0715 11:31:25.853591 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:31:25.853799 kubelet[1610]: E0715 11:31:25.853784 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:25.854066 env[1210]: time="2025-07-15T11:31:25.854038672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 15 11:31:25.866281 kubelet[1610]: I0715 11:31:25.866238 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:31:25.933006 kubelet[1610]: I0715 11:31:25.932972 1610 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:31:25.933304 kubelet[1610]: E0715 11:31:25.933278 1610 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.76:6443/api/v1/nodes\": dial tcp 10.0.0.76:6443: connect: connection refused" node="localhost" Jul 15 11:31:26.095646 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 15 11:31:26.096829 kubelet[1610]: E0715 11:31:26.096800 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:31:26.097001 kubelet[1610]: E0715 11:31:26.096986 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:26.097926 env[1210]: time="2025-07-15T11:31:26.097889746Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 15 11:31:26.639758 kubelet[1610]: E0715 11:31:26.639702 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.76:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 15 11:31:26.730046 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2900063628.mount: Deactivated successfully. Jul 15 11:31:26.734776 kubelet[1610]: I0715 11:31:26.734739 1610 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:31:26.735169 kubelet[1610]: E0715 11:31:26.735143 1610 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.76:6443/api/v1/nodes\": dial tcp 10.0.0.76:6443: connect: connection refused" node="localhost" Jul 15 11:31:26.737362 env[1210]: time="2025-07-15T11:31:26.737265016Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.741389 env[1210]: time="2025-07-15T11:31:26.741360885Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.742620 env[1210]: time="2025-07-15T11:31:26.742578146Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.743880 env[1210]: time="2025-07-15T11:31:26.743832668Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.746663 env[1210]: time="2025-07-15T11:31:26.746628550Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.747755 env[1210]: time="2025-07-15T11:31:26.747719214Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.748997 env[1210]: time="2025-07-15T11:31:26.748965731Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.750197 env[1210]: time="2025-07-15T11:31:26.750172002Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.751642 env[1210]: time="2025-07-15T11:31:26.751612623Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.752853 env[1210]: time="2025-07-15T11:31:26.752829594Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.754062 env[1210]: time="2025-07-15T11:31:26.754033000Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.755759 env[1210]: time="2025-07-15T11:31:26.755726866Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:26.758537 kubelet[1610]: E0715 11:31:26.758481 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.76:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.76:6443: connect: connection refused" interval="3.2s" Jul 15 11:31:26.784446 env[1210]: time="2025-07-15T11:31:26.784340847Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:26.784446 env[1210]: time="2025-07-15T11:31:26.784399477Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:26.784446 env[1210]: time="2025-07-15T11:31:26.784413523Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:26.784747 env[1210]: time="2025-07-15T11:31:26.784615822Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f96d4e64cc80af92c0908b7ef6cd07bb20120fe4d25a4b4e7ea6336cec605328 pid=1657 runtime=io.containerd.runc.v2 Jul 15 11:31:26.797644 env[1210]: time="2025-07-15T11:31:26.797568884Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:26.797845 env[1210]: time="2025-07-15T11:31:26.797819905Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:26.797940 env[1210]: time="2025-07-15T11:31:26.797916105Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:26.798267 env[1210]: time="2025-07-15T11:31:26.798209004Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/36dcb7a60d3af3d90e6803de38729ea1a0136e06faf7d5efdbce07b4e0352b6d pid=1684 runtime=io.containerd.runc.v2 Jul 15 11:31:26.800182 systemd[1]: Started cri-containerd-f96d4e64cc80af92c0908b7ef6cd07bb20120fe4d25a4b4e7ea6336cec605328.scope. Jul 15 11:31:26.805200 env[1210]: time="2025-07-15T11:31:26.805094633Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:26.805384 env[1210]: time="2025-07-15T11:31:26.805167379Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:26.805384 env[1210]: time="2025-07-15T11:31:26.805178670Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:26.805384 env[1210]: time="2025-07-15T11:31:26.805354490Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ffd8690fe5c64032b10e016a5b565f0eaa3410645c76643a540facddfaf5d5b0 pid=1702 runtime=io.containerd.runc.v2 Jul 15 11:31:26.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.815000 audit: BPF prog-id=55 op=LOAD Jul 15 11:31:26.815000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.815000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366434653634636338306166393263303930386237656636636430 Jul 15 11:31:26.815000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.815000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366434653634636338306166393263303930386237656636636430 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit: BPF prog-id=56 op=LOAD Jul 15 11:31:26.816000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00038c260 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366434653634636338306166393263303930386237656636636430 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit: BPF prog-id=57 op=LOAD Jul 15 11:31:26.816000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00038c2a8 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366434653634636338306166393263303930386237656636636430 Jul 15 11:31:26.816000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:31:26.816000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.816000 audit: BPF prog-id=58 op=LOAD Jul 15 11:31:26.816000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00038c6b8 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366434653634636338306166393263303930386237656636636430 Jul 15 11:31:26.820240 systemd[1]: Started cri-containerd-ffd8690fe5c64032b10e016a5b565f0eaa3410645c76643a540facddfaf5d5b0.scope. Jul 15 11:31:26.824787 systemd[1]: Started cri-containerd-36dcb7a60d3af3d90e6803de38729ea1a0136e06faf7d5efdbce07b4e0352b6d.scope. Jul 15 11:31:26.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit: BPF prog-id=59 op=LOAD Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1702 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666643836393066653563363430333262313065303136613562353635 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1702 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666643836393066653563363430333262313065303136613562353635 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit: BPF prog-id=60 op=LOAD Jul 15 11:31:26.832000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024930 items=0 ppid=1702 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666643836393066653563363430333262313065303136613562353635 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.832000 audit: BPF prog-id=61 op=LOAD Jul 15 11:31:26.832000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000024978 items=0 ppid=1702 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666643836393066653563363430333262313065303136613562353635 Jul 15 11:31:26.833000 audit: BPF prog-id=61 op=UNLOAD Jul 15 11:31:26.833000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.833000 audit: BPF prog-id=62 op=LOAD Jul 15 11:31:26.833000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000024d88 items=0 ppid=1702 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666643836393066653563363430333262313065303136613562353635 Jul 15 11:31:26.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit: BPF prog-id=63 op=LOAD Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1684 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336646362376136306433616633643930653638303364653338373239 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1684 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336646362376136306433616633643930653638303364653338373239 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit: BPF prog-id=64 op=LOAD Jul 15 11:31:26.835000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0002118f0 items=0 ppid=1684 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336646362376136306433616633643930653638303364653338373239 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.835000 audit: BPF prog-id=65 op=LOAD Jul 15 11:31:26.835000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000211938 items=0 ppid=1684 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336646362376136306433616633643930653638303364653338373239 Jul 15 11:31:26.835000 audit: BPF prog-id=65 op=UNLOAD Jul 15 11:31:26.836000 audit: BPF prog-id=64 op=UNLOAD Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.836000 audit: BPF prog-id=66 op=LOAD Jul 15 11:31:26.836000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000211d48 items=0 ppid=1684 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336646362376136306433616633643930653638303364653338373239 Jul 15 11:31:26.845657 env[1210]: time="2025-07-15T11:31:26.845620795Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"f96d4e64cc80af92c0908b7ef6cd07bb20120fe4d25a4b4e7ea6336cec605328\"" Jul 15 11:31:26.846821 kubelet[1610]: E0715 11:31:26.846642 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:26.850913 env[1210]: time="2025-07-15T11:31:26.850881146Z" level=info msg="CreateContainer within sandbox \"f96d4e64cc80af92c0908b7ef6cd07bb20120fe4d25a4b4e7ea6336cec605328\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:31:26.863214 env[1210]: time="2025-07-15T11:31:26.863113407Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:dc3908e4852f5d2819e4cf9d8cc8b451,Namespace:kube-system,Attempt:0,} returns sandbox id \"36dcb7a60d3af3d90e6803de38729ea1a0136e06faf7d5efdbce07b4e0352b6d\"" Jul 15 11:31:26.863976 kubelet[1610]: E0715 11:31:26.863953 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:26.864136 env[1210]: time="2025-07-15T11:31:26.864093454Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"ffd8690fe5c64032b10e016a5b565f0eaa3410645c76643a540facddfaf5d5b0\"" Jul 15 11:31:26.865345 kubelet[1610]: E0715 11:31:26.865317 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:26.867214 env[1210]: time="2025-07-15T11:31:26.867190360Z" level=info msg="CreateContainer within sandbox \"f96d4e64cc80af92c0908b7ef6cd07bb20120fe4d25a4b4e7ea6336cec605328\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"bdf5822c4a2e400aca28454d99854ec2623509214b9029c2595786e8b75b179e\"" Jul 15 11:31:26.867749 env[1210]: time="2025-07-15T11:31:26.867711367Z" level=info msg="StartContainer for \"bdf5822c4a2e400aca28454d99854ec2623509214b9029c2595786e8b75b179e\"" Jul 15 11:31:26.869176 env[1210]: time="2025-07-15T11:31:26.869144724Z" level=info msg="CreateContainer within sandbox \"36dcb7a60d3af3d90e6803de38729ea1a0136e06faf7d5efdbce07b4e0352b6d\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:31:26.871527 env[1210]: time="2025-07-15T11:31:26.871485983Z" level=info msg="CreateContainer within sandbox \"ffd8690fe5c64032b10e016a5b565f0eaa3410645c76643a540facddfaf5d5b0\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:31:26.884811 systemd[1]: Started cri-containerd-bdf5822c4a2e400aca28454d99854ec2623509214b9029c2595786e8b75b179e.scope. Jul 15 11:31:26.891451 env[1210]: time="2025-07-15T11:31:26.891352595Z" level=info msg="CreateContainer within sandbox \"36dcb7a60d3af3d90e6803de38729ea1a0136e06faf7d5efdbce07b4e0352b6d\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e6743b82fab1ab7625c400ffb49a0eca8f1e14ea222510af8584d23d44915e9e\"" Jul 15 11:31:26.895386 env[1210]: time="2025-07-15T11:31:26.895345701Z" level=info msg="CreateContainer within sandbox \"ffd8690fe5c64032b10e016a5b565f0eaa3410645c76643a540facddfaf5d5b0\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"64695ffa2ff46cb8a0a637e9452534f79151c701f0f10d6e94bfc4bcf2c9c9a7\"" Jul 15 11:31:26.896162 env[1210]: time="2025-07-15T11:31:26.896143437Z" level=info msg="StartContainer for \"e6743b82fab1ab7625c400ffb49a0eca8f1e14ea222510af8584d23d44915e9e\"" Jul 15 11:31:26.896414 env[1210]: time="2025-07-15T11:31:26.896265095Z" level=info msg="StartContainer for \"64695ffa2ff46cb8a0a637e9452534f79151c701f0f10d6e94bfc4bcf2c9c9a7\"" Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit: BPF prog-id=67 op=LOAD Jul 15 11:31:26.898000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1657 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663538323263346132653430306163613238343534643939383534 Jul 15 11:31:26.898000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.898000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1657 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663538323263346132653430306163613238343534643939383534 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit: BPF prog-id=68 op=LOAD Jul 15 11:31:26.899000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000304cf0 items=0 ppid=1657 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663538323263346132653430306163613238343534643939383534 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit: BPF prog-id=69 op=LOAD Jul 15 11:31:26.899000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000304d38 items=0 ppid=1657 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663538323263346132653430306163613238343534643939383534 Jul 15 11:31:26.899000 audit: BPF prog-id=69 op=UNLOAD Jul 15 11:31:26.899000 audit: BPF prog-id=68 op=UNLOAD Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.899000 audit: BPF prog-id=70 op=LOAD Jul 15 11:31:26.899000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000305148 items=0 ppid=1657 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663538323263346132653430306163613238343534643939383534 Jul 15 11:31:26.912612 systemd[1]: Started cri-containerd-64695ffa2ff46cb8a0a637e9452534f79151c701f0f10d6e94bfc4bcf2c9c9a7.scope. Jul 15 11:31:26.915810 systemd[1]: Started cri-containerd-e6743b82fab1ab7625c400ffb49a0eca8f1e14ea222510af8584d23d44915e9e.scope. Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit: BPF prog-id=71 op=LOAD Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1702 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634363935666661326666343663623861306136333765393435323533 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1702 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634363935666661326666343663623861306136333765393435323533 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.928000 audit: BPF prog-id=72 op=LOAD Jul 15 11:31:26.928000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d5d00 items=0 ppid=1702 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634363935666661326666343663623861306136333765393435323533 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit: BPF prog-id=73 op=LOAD Jul 15 11:31:26.929000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d5d48 items=0 ppid=1702 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634363935666661326666343663623861306136333765393435323533 Jul 15 11:31:26.929000 audit: BPF prog-id=73 op=UNLOAD Jul 15 11:31:26.929000 audit: BPF prog-id=72 op=UNLOAD Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.929000 audit: BPF prog-id=74 op=LOAD Jul 15 11:31:26.929000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d2158 items=0 ppid=1702 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634363935666661326666343663623861306136333765393435323533 Jul 15 11:31:26.935438 env[1210]: time="2025-07-15T11:31:26.935390901Z" level=info msg="StartContainer for \"bdf5822c4a2e400aca28454d99854ec2623509214b9029c2595786e8b75b179e\" returns successfully" Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit: BPF prog-id=75 op=LOAD Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=1684 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373433623832666162316162373632356334303066666234396130 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=8 items=0 ppid=1684 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373433623832666162316162373632356334303066666234396130 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.937000 audit: BPF prog-id=76 op=LOAD Jul 15 11:31:26.937000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c000241590 items=0 ppid=1684 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373433623832666162316162373632356334303066666234396130 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit: BPF prog-id=77 op=LOAD Jul 15 11:31:26.938000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c0002415d8 items=0 ppid=1684 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373433623832666162316162373632356334303066666234396130 Jul 15 11:31:26.938000 audit: BPF prog-id=77 op=UNLOAD Jul 15 11:31:26.938000 audit: BPF prog-id=76 op=UNLOAD Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:26.938000 audit: BPF prog-id=78 op=LOAD Jul 15 11:31:26.938000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c0002419e8 items=0 ppid=1684 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:26.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373433623832666162316162373632356334303066666234396130 Jul 15 11:31:26.969359 env[1210]: time="2025-07-15T11:31:26.969283187Z" level=info msg="StartContainer for \"64695ffa2ff46cb8a0a637e9452534f79151c701f0f10d6e94bfc4bcf2c9c9a7\" returns successfully" Jul 15 11:31:26.973573 env[1210]: time="2025-07-15T11:31:26.973525270Z" level=info msg="StartContainer for \"e6743b82fab1ab7625c400ffb49a0eca8f1e14ea222510af8584d23d44915e9e\" returns successfully" Jul 15 11:31:27.775342 kubelet[1610]: E0715 11:31:27.775302 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:31:27.775731 kubelet[1610]: E0715 11:31:27.775429 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:27.780262 kubelet[1610]: E0715 11:31:27.780226 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:31:27.780423 kubelet[1610]: E0715 11:31:27.780334 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:27.782241 kubelet[1610]: E0715 11:31:27.782219 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:31:27.782383 kubelet[1610]: E0715 11:31:27.782366 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:28.110377 kernel: kauditd_printk_skb: 567 callbacks suppressed Jul 15 11:31:28.110510 kernel: audit: type=1400 audit(1752579088.100:541): avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.110539 kernel: audit: type=1400 audit(1752579088.101:542): avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6721 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.100000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.101000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6721 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.101000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0059cc060 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:31:28.118149 kernel: audit: type=1300 audit(1752579088.101:542): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0059cc060 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:31:28.101000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:28.129974 kernel: audit: type=1327 audit(1752579088.101:542): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:28.130004 kernel: audit: type=1400 audit(1752579088.104:543): avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.104000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.104000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c0044105d0 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:31:28.135151 kernel: audit: type=1300 audit(1752579088.104:543): arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c0044105d0 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:31:28.104000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:28.142431 kernel: audit: type=1327 audit(1752579088.104:543): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:28.142459 kernel: audit: type=1400 audit(1752579088.110:544): avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.110000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.146983 kernel: audit: type=1300 audit(1752579088.110:544): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0022833c0 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:31:28.110000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0022833c0 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:31:28.150855 kernel: audit: type=1327 audit(1752579088.110:544): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:28.110000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:28.110000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.110000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0059cc570 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:31:28.110000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:28.100000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004664030 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:31:28.100000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:28.119000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.119000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c008279920 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:31:28.119000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:31:28.220000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.220000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00068c5d0 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:28.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:28.220000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:28.220000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000318060 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:28.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:28.336601 kubelet[1610]: I0715 11:31:28.336556 1610 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:31:28.343275 kubelet[1610]: I0715 11:31:28.343231 1610 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:31:28.343275 kubelet[1610]: E0715 11:31:28.343275 1610 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 15 11:31:28.354091 kubelet[1610]: I0715 11:31:28.354043 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:28.359192 kubelet[1610]: E0715 11:31:28.359155 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:28.359192 kubelet[1610]: I0715 11:31:28.359178 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:28.360768 kubelet[1610]: E0715 11:31:28.360684 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:28.360768 kubelet[1610]: I0715 11:31:28.360698 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:31:28.362591 kubelet[1610]: E0715 11:31:28.362575 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 15 11:31:28.726685 kubelet[1610]: I0715 11:31:28.726633 1610 apiserver.go:52] "Watching apiserver" Jul 15 11:31:28.754044 kubelet[1610]: I0715 11:31:28.754006 1610 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:31:28.782586 kubelet[1610]: I0715 11:31:28.782565 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:31:28.782869 kubelet[1610]: I0715 11:31:28.782761 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:28.784262 kubelet[1610]: E0715 11:31:28.784223 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:28.784463 kubelet[1610]: E0715 11:31:28.784378 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:28.784754 kubelet[1610]: E0715 11:31:28.784725 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 15 11:31:28.784829 kubelet[1610]: E0715 11:31:28.784816 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:30.022593 kubelet[1610]: I0715 11:31:30.022565 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:31:30.106259 kubelet[1610]: I0715 11:31:30.106216 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:30.249619 kubelet[1610]: E0715 11:31:30.249579 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:30.322323 kubelet[1610]: E0715 11:31:30.322178 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:30.785174 kubelet[1610]: E0715 11:31:30.785139 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:30.785374 kubelet[1610]: E0715 11:31:30.785355 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:31.805000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:31:31.805000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000200600 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:31.805000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:31.835921 systemd[1]: Reloading. Jul 15 11:31:31.903277 /usr/lib/systemd/system-generators/torcx-generator[1919]: time="2025-07-15T11:31:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:31:31.903632 /usr/lib/systemd/system-generators/torcx-generator[1919]: time="2025-07-15T11:31:31Z" level=info msg="torcx already run" Jul 15 11:31:32.071507 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:31:32.071526 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:31:32.088571 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:31:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit: BPF prog-id=79 op=LOAD Jul 15 11:31:32.161000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit: BPF prog-id=80 op=LOAD Jul 15 11:31:32.161000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit: BPF prog-id=81 op=LOAD Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.161000 audit: BPF prog-id=82 op=LOAD Jul 15 11:31:32.161000 audit: BPF prog-id=42 op=UNLOAD Jul 15 11:31:32.161000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.162000 audit: BPF prog-id=83 op=LOAD Jul 15 11:31:32.162000 audit: BPF prog-id=59 op=UNLOAD Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.164000 audit: BPF prog-id=84 op=LOAD Jul 15 11:31:32.164000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit: BPF prog-id=85 op=LOAD Jul 15 11:31:32.165000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit: BPF prog-id=86 op=LOAD Jul 15 11:31:32.166000 audit: BPF prog-id=45 op=UNLOAD Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit: BPF prog-id=87 op=LOAD Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.166000 audit: BPF prog-id=88 op=LOAD Jul 15 11:31:32.166000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:31:32.166000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.167000 audit: BPF prog-id=89 op=LOAD Jul 15 11:31:32.167000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit: BPF prog-id=90 op=LOAD Jul 15 11:31:32.169000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit: BPF prog-id=91 op=LOAD Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit: BPF prog-id=92 op=LOAD Jul 15 11:31:32.169000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:31:32.169000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.170000 audit: BPF prog-id=93 op=LOAD Jul 15 11:31:32.170000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit: BPF prog-id=94 op=LOAD Jul 15 11:31:32.171000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit: BPF prog-id=95 op=LOAD Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.171000 audit: BPF prog-id=96 op=LOAD Jul 15 11:31:32.171000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:31:32.171000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit: BPF prog-id=97 op=LOAD Jul 15 11:31:32.172000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.172000 audit: BPF prog-id=98 op=LOAD Jul 15 11:31:32.172000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.173000 audit: BPF prog-id=99 op=LOAD Jul 15 11:31:32.173000 audit: BPF prog-id=63 op=UNLOAD Jul 15 11:31:32.182626 systemd[1]: Stopping kubelet.service... Jul 15 11:31:32.208423 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:31:32.208674 systemd[1]: Stopped kubelet.service. Jul 15 11:31:32.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:32.208741 systemd[1]: kubelet.service: Consumed 1.098s CPU time. Jul 15 11:31:32.210354 systemd[1]: Starting kubelet.service... Jul 15 11:31:32.302214 systemd[1]: Started kubelet.service. Jul 15 11:31:32.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:32.343416 kubelet[1964]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:31:32.343416 kubelet[1964]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:31:32.343416 kubelet[1964]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:31:32.343416 kubelet[1964]: I0715 11:31:32.343254 1964 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:31:32.349944 kubelet[1964]: I0715 11:31:32.349906 1964 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 15 11:31:32.349944 kubelet[1964]: I0715 11:31:32.349931 1964 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:31:32.350152 kubelet[1964]: I0715 11:31:32.350109 1964 server.go:956] "Client rotation is on, will bootstrap in background" Jul 15 11:31:32.352456 kubelet[1964]: I0715 11:31:32.352397 1964 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 15 11:31:32.355089 kubelet[1964]: I0715 11:31:32.355053 1964 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:31:32.358985 kubelet[1964]: E0715 11:31:32.358918 1964 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:31:32.358985 kubelet[1964]: I0715 11:31:32.358978 1964 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:31:32.363368 kubelet[1964]: I0715 11:31:32.363348 1964 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:31:32.363570 kubelet[1964]: I0715 11:31:32.363539 1964 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:31:32.363708 kubelet[1964]: I0715 11:31:32.363565 1964 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:31:32.363708 kubelet[1964]: I0715 11:31:32.363708 1964 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:31:32.363818 kubelet[1964]: I0715 11:31:32.363716 1964 container_manager_linux.go:303] "Creating device plugin manager" Jul 15 11:31:32.363818 kubelet[1964]: I0715 11:31:32.363750 1964 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:31:32.363883 kubelet[1964]: I0715 11:31:32.363870 1964 kubelet.go:480] "Attempting to sync node with API server" Jul 15 11:31:32.363908 kubelet[1964]: I0715 11:31:32.363896 1964 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:31:32.363935 kubelet[1964]: I0715 11:31:32.363915 1964 kubelet.go:386] "Adding apiserver pod source" Jul 15 11:31:32.363935 kubelet[1964]: I0715 11:31:32.363929 1964 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:31:32.364914 kubelet[1964]: I0715 11:31:32.364835 1964 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:31:32.367486 kubelet[1964]: I0715 11:31:32.365347 1964 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 15 11:31:32.371520 kubelet[1964]: I0715 11:31:32.371495 1964 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:31:32.371928 kubelet[1964]: I0715 11:31:32.371890 1964 server.go:1289] "Started kubelet" Jul 15 11:31:32.372380 kubelet[1964]: I0715 11:31:32.372330 1964 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:31:32.373091 kubelet[1964]: I0715 11:31:32.373032 1964 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:31:32.374964 kubelet[1964]: I0715 11:31:32.374931 1964 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:31:32.376474 kubelet[1964]: I0715 11:31:32.376455 1964 server.go:317] "Adding debug handlers to kubelet server" Jul 15 11:31:32.377000 audit[1964]: AVC avc: denied { mac_admin } for pid=1964 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.377000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:31:32.377000 audit[1964]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d48630 a1=c000bfca20 a2=c000d48600 a3=25 items=0 ppid=1 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:32.377000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:31:32.377000 audit[1964]: AVC avc: denied { mac_admin } for pid=1964 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.377000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:31:32.377000 audit[1964]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bfafe0 a1=c000bfca38 a2=c000d486c0 a3=25 items=0 ppid=1 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:32.377000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:31:32.378110 kubelet[1964]: I0715 11:31:32.377299 1964 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:31:32.378110 kubelet[1964]: I0715 11:31:32.377334 1964 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:31:32.378110 kubelet[1964]: I0715 11:31:32.377365 1964 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:31:32.381918 kubelet[1964]: I0715 11:31:32.381879 1964 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:31:32.383596 kubelet[1964]: I0715 11:31:32.383553 1964 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:31:32.383967 kubelet[1964]: E0715 11:31:32.383921 1964 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:31:32.385150 kubelet[1964]: I0715 11:31:32.385114 1964 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:31:32.385291 kubelet[1964]: I0715 11:31:32.385268 1964 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:31:32.385695 kubelet[1964]: I0715 11:31:32.385647 1964 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:31:32.387162 kubelet[1964]: I0715 11:31:32.387103 1964 factory.go:223] Registration of the containerd container factory successfully Jul 15 11:31:32.387162 kubelet[1964]: I0715 11:31:32.387132 1964 factory.go:223] Registration of the systemd container factory successfully Jul 15 11:31:32.387542 kubelet[1964]: E0715 11:31:32.387452 1964 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:31:32.394349 kubelet[1964]: I0715 11:31:32.394302 1964 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 15 11:31:32.395210 kubelet[1964]: I0715 11:31:32.395197 1964 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 15 11:31:32.395286 kubelet[1964]: I0715 11:31:32.395271 1964 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 15 11:31:32.395372 kubelet[1964]: I0715 11:31:32.395354 1964 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:31:32.395452 kubelet[1964]: I0715 11:31:32.395438 1964 kubelet.go:2436] "Starting kubelet main sync loop" Jul 15 11:31:32.395577 kubelet[1964]: E0715 11:31:32.395557 1964 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:31:32.417749 kubelet[1964]: I0715 11:31:32.417726 1964 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:31:32.417749 kubelet[1964]: I0715 11:31:32.417742 1964 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:31:32.417846 kubelet[1964]: I0715 11:31:32.417762 1964 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:31:32.417922 kubelet[1964]: I0715 11:31:32.417906 1964 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:31:32.417947 kubelet[1964]: I0715 11:31:32.417919 1964 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:31:32.417947 kubelet[1964]: I0715 11:31:32.417942 1964 policy_none.go:49] "None policy: Start" Jul 15 11:31:32.418009 kubelet[1964]: I0715 11:31:32.417950 1964 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:31:32.418009 kubelet[1964]: I0715 11:31:32.417959 1964 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:31:32.418072 kubelet[1964]: I0715 11:31:32.418059 1964 state_mem.go:75] "Updated machine memory state" Jul 15 11:31:32.421766 kubelet[1964]: E0715 11:31:32.421746 1964 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 15 11:31:32.421000 audit[1964]: AVC avc: denied { mac_admin } for pid=1964 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:32.421000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:31:32.421000 audit[1964]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000dc6480 a1=c000faa990 a2=c000dc6450 a3=25 items=0 ppid=1 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:32.421000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:31:32.422154 kubelet[1964]: E0715 11:31:32.422109 1964 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 15 11:31:32.422411 kubelet[1964]: I0715 11:31:32.422391 1964 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:31:32.422620 kubelet[1964]: I0715 11:31:32.422564 1964 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:31:32.423041 kubelet[1964]: I0715 11:31:32.422849 1964 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:31:32.424063 kubelet[1964]: E0715 11:31:32.424033 1964 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:31:32.497330 kubelet[1964]: I0715 11:31:32.497276 1964 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:31:32.497600 kubelet[1964]: I0715 11:31:32.497423 1964 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:32.497600 kubelet[1964]: I0715 11:31:32.497430 1964 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:32.503093 kubelet[1964]: E0715 11:31:32.503055 1964 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 15 11:31:32.503194 kubelet[1964]: E0715 11:31:32.503110 1964 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:32.526657 kubelet[1964]: I0715 11:31:32.526626 1964 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:31:32.532513 kubelet[1964]: I0715 11:31:32.532473 1964 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 15 11:31:32.532721 kubelet[1964]: I0715 11:31:32.532555 1964 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:31:32.586640 kubelet[1964]: I0715 11:31:32.586597 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/dc3908e4852f5d2819e4cf9d8cc8b451-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"dc3908e4852f5d2819e4cf9d8cc8b451\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:32.586997 kubelet[1964]: I0715 11:31:32.586972 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:32.587181 kubelet[1964]: I0715 11:31:32.587154 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:32.587260 kubelet[1964]: I0715 11:31:32.587188 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:32.587260 kubelet[1964]: I0715 11:31:32.587208 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:32.587260 kubelet[1964]: I0715 11:31:32.587230 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:31:32.587260 kubelet[1964]: I0715 11:31:32.587249 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/dc3908e4852f5d2819e4cf9d8cc8b451-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"dc3908e4852f5d2819e4cf9d8cc8b451\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:32.587527 kubelet[1964]: I0715 11:31:32.587265 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/dc3908e4852f5d2819e4cf9d8cc8b451-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"dc3908e4852f5d2819e4cf9d8cc8b451\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:32.687555 kubelet[1964]: I0715 11:31:32.687476 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:31:32.802055 kubelet[1964]: E0715 11:31:32.801992 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:32.804283 kubelet[1964]: E0715 11:31:32.804253 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:32.804361 kubelet[1964]: E0715 11:31:32.804253 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:33.365042 kubelet[1964]: I0715 11:31:33.365000 1964 apiserver.go:52] "Watching apiserver" Jul 15 11:31:33.385691 kubelet[1964]: I0715 11:31:33.385647 1964 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:31:33.406377 kubelet[1964]: I0715 11:31:33.406346 1964 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:33.406792 kubelet[1964]: E0715 11:31:33.406523 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:33.407088 kubelet[1964]: E0715 11:31:33.407051 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:33.416147 kubelet[1964]: E0715 11:31:33.412241 1964 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:31:33.416147 kubelet[1964]: E0715 11:31:33.412391 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:33.428973 kubelet[1964]: I0715 11:31:33.428890 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=3.428872096 podStartE2EDuration="3.428872096s" podCreationTimestamp="2025-07-15 11:31:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:31:33.428603373 +0000 UTC m=+1.122891219" watchObservedRunningTime="2025-07-15 11:31:33.428872096 +0000 UTC m=+1.123159942" Jul 15 11:31:33.429213 kubelet[1964]: I0715 11:31:33.429032 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=3.429025379 podStartE2EDuration="3.429025379s" podCreationTimestamp="2025-07-15 11:31:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:31:33.421932071 +0000 UTC m=+1.116219937" watchObservedRunningTime="2025-07-15 11:31:33.429025379 +0000 UTC m=+1.123313215" Jul 15 11:31:33.443831 kubelet[1964]: I0715 11:31:33.443784 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.443752807 podStartE2EDuration="1.443752807s" podCreationTimestamp="2025-07-15 11:31:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:31:33.435038043 +0000 UTC m=+1.129325889" watchObservedRunningTime="2025-07-15 11:31:33.443752807 +0000 UTC m=+1.138040653" Jul 15 11:31:34.013168 kernel: kauditd_printk_skb: 275 callbacks suppressed Jul 15 11:31:34.013326 kernel: audit: type=1400 audit(1752579094.011:799): avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:34.011000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:34.011000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000be96e0 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:34.020216 kernel: audit: type=1300 audit(1752579094.011:799): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000be96e0 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:34.020370 kernel: audit: type=1327 audit(1752579094.011:799): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:34.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:34.024047 kernel: audit: type=1400 audit(1752579094.011:800): avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:34.011000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:34.027440 kernel: audit: type=1300 audit(1752579094.011:800): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00148a6e0 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:34.011000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00148a6e0 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:34.031988 kernel: audit: type=1327 audit(1752579094.011:800): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:34.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:34.035803 kernel: audit: type=1400 audit(1752579094.012:801): avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:34.012000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:34.039161 kernel: audit: type=1300 audit(1752579094.012:801): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000be98a0 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:34.012000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000be98a0 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:34.043732 kernel: audit: type=1327 audit(1752579094.012:801): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:34.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:34.012000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:34.050937 kernel: audit: type=1400 audit(1752579094.012:802): avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:34.012000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017c2400 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:31:34.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:34.408324 kubelet[1964]: E0715 11:31:34.408202 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:34.408732 kubelet[1964]: E0715 11:31:34.408364 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:37.024902 kubelet[1964]: I0715 11:31:37.024861 1964 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:31:37.025315 env[1210]: time="2025-07-15T11:31:37.025192475Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:31:37.025504 kubelet[1964]: I0715 11:31:37.025431 1964 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:31:37.383216 systemd[1]: Created slice kubepods-besteffort-poda830623b_c13f_44ae_b6c7_d8693981dd27.slice. Jul 15 11:31:37.422266 kubelet[1964]: I0715 11:31:37.422213 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/a830623b-c13f-44ae-b6c7-d8693981dd27-kube-proxy\") pod \"kube-proxy-w6jrb\" (UID: \"a830623b-c13f-44ae-b6c7-d8693981dd27\") " pod="kube-system/kube-proxy-w6jrb" Jul 15 11:31:37.422266 kubelet[1964]: I0715 11:31:37.422268 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sprpf\" (UniqueName: \"kubernetes.io/projected/a830623b-c13f-44ae-b6c7-d8693981dd27-kube-api-access-sprpf\") pod \"kube-proxy-w6jrb\" (UID: \"a830623b-c13f-44ae-b6c7-d8693981dd27\") " pod="kube-system/kube-proxy-w6jrb" Jul 15 11:31:37.422481 kubelet[1964]: I0715 11:31:37.422295 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a830623b-c13f-44ae-b6c7-d8693981dd27-xtables-lock\") pod \"kube-proxy-w6jrb\" (UID: \"a830623b-c13f-44ae-b6c7-d8693981dd27\") " pod="kube-system/kube-proxy-w6jrb" Jul 15 11:31:37.422481 kubelet[1964]: I0715 11:31:37.422315 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a830623b-c13f-44ae-b6c7-d8693981dd27-lib-modules\") pod \"kube-proxy-w6jrb\" (UID: \"a830623b-c13f-44ae-b6c7-d8693981dd27\") " pod="kube-system/kube-proxy-w6jrb" Jul 15 11:31:37.527578 kubelet[1964]: I0715 11:31:37.527540 1964 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:31:37.692509 kubelet[1964]: E0715 11:31:37.692481 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:37.692816 systemd[1]: Created slice kubepods-besteffort-pod275d4a1d_3c02_40c0_9d26_21f5eafb1517.slice. Jul 15 11:31:37.693197 env[1210]: time="2025-07-15T11:31:37.693145368Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-w6jrb,Uid:a830623b-c13f-44ae-b6c7-d8693981dd27,Namespace:kube-system,Attempt:0,}" Jul 15 11:31:37.708534 env[1210]: time="2025-07-15T11:31:37.708441339Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:37.708534 env[1210]: time="2025-07-15T11:31:37.708493068Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:37.708534 env[1210]: time="2025-07-15T11:31:37.708505842Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:37.708946 env[1210]: time="2025-07-15T11:31:37.708902386Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bc3f5f37f655e5370da0cef0b8f037c4372374ea0a3b50c16c1e10387dbb9b96 pid=2025 runtime=io.containerd.runc.v2 Jul 15 11:31:37.724958 kubelet[1964]: I0715 11:31:37.724630 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/275d4a1d-3c02-40c0-9d26-21f5eafb1517-var-lib-calico\") pod \"tigera-operator-747864d56d-m8dhb\" (UID: \"275d4a1d-3c02-40c0-9d26-21f5eafb1517\") " pod="tigera-operator/tigera-operator-747864d56d-m8dhb" Jul 15 11:31:37.724958 kubelet[1964]: I0715 11:31:37.724671 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lbfnf\" (UniqueName: \"kubernetes.io/projected/275d4a1d-3c02-40c0-9d26-21f5eafb1517-kube-api-access-lbfnf\") pod \"tigera-operator-747864d56d-m8dhb\" (UID: \"275d4a1d-3c02-40c0-9d26-21f5eafb1517\") " pod="tigera-operator/tigera-operator-747864d56d-m8dhb" Jul 15 11:31:37.725926 systemd[1]: run-containerd-runc-k8s.io-bc3f5f37f655e5370da0cef0b8f037c4372374ea0a3b50c16c1e10387dbb9b96-runc.S3l3W8.mount: Deactivated successfully. Jul 15 11:31:37.727542 systemd[1]: Started cri-containerd-bc3f5f37f655e5370da0cef0b8f037c4372374ea0a3b50c16c1e10387dbb9b96.scope. Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit: BPF prog-id=100 op=LOAD Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2025 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336635663337663635356535333730646130636566306238663033 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2025 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336635663337663635356535333730646130636566306238663033 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.740000 audit: BPF prog-id=101 op=LOAD Jul 15 11:31:37.740000 audit[2034]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000359fc0 items=0 ppid=2025 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336635663337663635356535333730646130636566306238663033 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit: BPF prog-id=102 op=LOAD Jul 15 11:31:37.741000 audit[2034]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003be008 items=0 ppid=2025 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336635663337663635356535333730646130636566306238663033 Jul 15 11:31:37.741000 audit: BPF prog-id=102 op=UNLOAD Jul 15 11:31:37.741000 audit: BPF prog-id=101 op=UNLOAD Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { perfmon } for pid=2034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit[2034]: AVC avc: denied { bpf } for pid=2034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.741000 audit: BPF prog-id=103 op=LOAD Jul 15 11:31:37.741000 audit[2034]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003be418 items=0 ppid=2025 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336635663337663635356535333730646130636566306238663033 Jul 15 11:31:37.751616 env[1210]: time="2025-07-15T11:31:37.751570126Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-w6jrb,Uid:a830623b-c13f-44ae-b6c7-d8693981dd27,Namespace:kube-system,Attempt:0,} returns sandbox id \"bc3f5f37f655e5370da0cef0b8f037c4372374ea0a3b50c16c1e10387dbb9b96\"" Jul 15 11:31:37.752177 kubelet[1964]: E0715 11:31:37.752154 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:37.757031 env[1210]: time="2025-07-15T11:31:37.756833646Z" level=info msg="CreateContainer within sandbox \"bc3f5f37f655e5370da0cef0b8f037c4372374ea0a3b50c16c1e10387dbb9b96\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:31:37.771077 env[1210]: time="2025-07-15T11:31:37.771018273Z" level=info msg="CreateContainer within sandbox \"bc3f5f37f655e5370da0cef0b8f037c4372374ea0a3b50c16c1e10387dbb9b96\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"21765cc13d7f7faedbe63bac47084362ba899fb490f369951e82f2bc8e15c89b\"" Jul 15 11:31:37.771895 env[1210]: time="2025-07-15T11:31:37.771864103Z" level=info msg="StartContainer for \"21765cc13d7f7faedbe63bac47084362ba899fb490f369951e82f2bc8e15c89b\"" Jul 15 11:31:37.788297 systemd[1]: Started cri-containerd-21765cc13d7f7faedbe63bac47084362ba899fb490f369951e82f2bc8e15c89b.scope. Jul 15 11:31:37.801000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.801000 audit[2067]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fb8e0ee6ec8 items=0 ppid=2025 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231373635636331336437663766616564626536336261633437303834 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit: BPF prog-id=104 op=LOAD Jul 15 11:31:37.802000 audit[2067]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003605d8 items=0 ppid=2025 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231373635636331336437663766616564626536336261633437303834 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit: BPF prog-id=105 op=LOAD Jul 15 11:31:37.802000 audit[2067]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000360628 items=0 ppid=2025 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231373635636331336437663766616564626536336261633437303834 Jul 15 11:31:37.802000 audit: BPF prog-id=105 op=UNLOAD Jul 15 11:31:37.802000 audit: BPF prog-id=104 op=UNLOAD Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:37.802000 audit: BPF prog-id=106 op=LOAD Jul 15 11:31:37.802000 audit[2067]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003606b8 items=0 ppid=2025 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231373635636331336437663766616564626536336261633437303834 Jul 15 11:31:37.817186 env[1210]: time="2025-07-15T11:31:37.817138939Z" level=info msg="StartContainer for \"21765cc13d7f7faedbe63bac47084362ba899fb490f369951e82f2bc8e15c89b\" returns successfully" Jul 15 11:31:37.915000 audit[2131]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2131 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:37.915000 audit[2131]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe4090aea0 a2=0 a3=7ffe4090ae8c items=0 ppid=2078 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.915000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:31:37.916000 audit[2132]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2132 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:37.916000 audit[2132]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd6e487d70 a2=0 a3=7ffd6e487d5c items=0 ppid=2078 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.916000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:31:37.917000 audit[2135]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:37.917000 audit[2135]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb7ab6510 a2=0 a3=7ffdb7ab64fc items=0 ppid=2078 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.917000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:31:37.918000 audit[2137]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:37.918000 audit[2137]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe0e021960 a2=0 a3=7ffe0e02194c items=0 ppid=2078 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.918000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:31:37.919000 audit[2133]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:37.919000 audit[2133]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2ac08350 a2=0 a3=7fff2ac0833c items=0 ppid=2078 pid=2133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.919000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:31:37.920000 audit[2139]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:37.920000 audit[2139]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff9e833c50 a2=0 a3=7fff9e833c3c items=0 ppid=2078 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.920000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:31:37.995951 env[1210]: time="2025-07-15T11:31:37.995872701Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-m8dhb,Uid:275d4a1d-3c02-40c0-9d26-21f5eafb1517,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:31:38.014380 env[1210]: time="2025-07-15T11:31:38.014310415Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:38.014498 env[1210]: time="2025-07-15T11:31:38.014360050Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:38.014498 env[1210]: time="2025-07-15T11:31:38.014422699Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:38.014649 env[1210]: time="2025-07-15T11:31:38.014590047Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6bec08172712d339b937090ca836a1d6828389578eb78d8de4345411acb417ce pid=2147 runtime=io.containerd.runc.v2 Jul 15 11:31:38.018000 audit[2163]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.018000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc377a0ec0 a2=0 a3=7ffc377a0eac items=0 ppid=2078 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.018000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:31:38.020000 audit[2166]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.020000 audit[2166]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffee5f35270 a2=0 a3=7ffee5f3525c items=0 ppid=2078 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.020000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:31:38.023000 audit[2173]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.023000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd7e5d9420 a2=0 a3=7ffd7e5d940c items=0 ppid=2078 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.023000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:31:38.024000 audit[2174]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.024000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffea54ba9d0 a2=0 a3=7ffea54ba9bc items=0 ppid=2078 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.024000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:31:38.026000 audit[2176]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.026000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffb3cab660 a2=0 a3=7fffb3cab64c items=0 ppid=2078 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.026000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:31:38.028658 systemd[1]: Started cri-containerd-6bec08172712d339b937090ca836a1d6828389578eb78d8de4345411acb417ce.scope. Jul 15 11:31:38.027000 audit[2177]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.027000 audit[2177]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4cd78ef0 a2=0 a3=7fff4cd78edc items=0 ppid=2078 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.027000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:31:38.030000 audit[2186]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.030000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff5098b990 a2=0 a3=7fff5098b97c items=0 ppid=2078 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.030000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:31:38.034000 audit[2189]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.034000 audit[2189]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe2ea0b1b0 a2=0 a3=7ffe2ea0b19c items=0 ppid=2078 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.034000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:31:38.035000 audit[2190]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.035000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd4488b70 a2=0 a3=7ffcd4488b5c items=0 ppid=2078 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.035000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit: BPF prog-id=107 op=LOAD Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2147 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662656330383137323731326433333962393337303930636138333661 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2147 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662656330383137323731326433333962393337303930636138333661 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.036000 audit: BPF prog-id=108 op=LOAD Jul 15 11:31:38.036000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003c4650 items=0 ppid=2147 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662656330383137323731326433333962393337303930636138333661 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit: BPF prog-id=109 op=LOAD Jul 15 11:31:38.037000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003c4698 items=0 ppid=2147 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662656330383137323731326433333962393337303930636138333661 Jul 15 11:31:38.037000 audit: BPF prog-id=109 op=UNLOAD Jul 15 11:31:38.037000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:38.037000 audit: BPF prog-id=110 op=LOAD Jul 15 11:31:38.037000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003c4aa8 items=0 ppid=2147 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662656330383137323731326433333962393337303930636138333661 Jul 15 11:31:38.038000 audit[2192]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.038000 audit[2192]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd27d683b0 a2=0 a3=7ffd27d6839c items=0 ppid=2078 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.038000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:31:38.039000 audit[2193]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.039000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8ff67890 a2=0 a3=7ffe8ff6787c items=0 ppid=2078 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.039000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:31:38.041000 audit[2195]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.041000 audit[2195]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe03221ff0 a2=0 a3=7ffe03221fdc items=0 ppid=2078 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.041000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:31:38.044000 audit[2198]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.044000 audit[2198]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc588ee8f0 a2=0 a3=7ffc588ee8dc items=0 ppid=2078 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.044000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:31:38.047000 audit[2201]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.047000 audit[2201]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff2697ad60 a2=0 a3=7fff2697ad4c items=0 ppid=2078 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.047000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:31:38.049000 audit[2202]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.049000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc6534e230 a2=0 a3=7ffc6534e21c items=0 ppid=2078 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.049000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:31:38.051000 audit[2204]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.051000 audit[2204]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd009ab990 a2=0 a3=7ffd009ab97c items=0 ppid=2078 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.051000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:31:38.054000 audit[2207]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.054000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff3d571bc0 a2=0 a3=7fff3d571bac items=0 ppid=2078 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.054000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:31:38.055000 audit[2209]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.055000 audit[2209]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd2b5ab280 a2=0 a3=7ffd2b5ab26c items=0 ppid=2078 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:31:38.057000 audit[2216]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:31:38.057000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc08527740 a2=0 a3=7ffc0852772c items=0 ppid=2078 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.057000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:31:38.061801 env[1210]: time="2025-07-15T11:31:38.061763586Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-m8dhb,Uid:275d4a1d-3c02-40c0-9d26-21f5eafb1517,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"6bec08172712d339b937090ca836a1d6828389578eb78d8de4345411acb417ce\"" Jul 15 11:31:38.064523 env[1210]: time="2025-07-15T11:31:38.064497401Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:31:38.084000 audit[2222]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:38.084000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcf009e300 a2=0 a3=7ffcf009e2ec items=0 ppid=2078 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.084000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:38.094000 audit[2222]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:38.094000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffcf009e300 a2=0 a3=7ffcf009e2ec items=0 ppid=2078 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.094000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:38.095000 audit[2227]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.095000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc8df74960 a2=0 a3=7ffc8df7494c items=0 ppid=2078 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.095000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:31:38.097000 audit[2229]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.097000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe6617a4b0 a2=0 a3=7ffe6617a49c items=0 ppid=2078 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.097000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:31:38.100000 audit[2232]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.100000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe45e9f050 a2=0 a3=7ffe45e9f03c items=0 ppid=2078 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.100000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:31:38.101000 audit[2233]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.101000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0067a020 a2=0 a3=7ffd0067a00c items=0 ppid=2078 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.101000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:31:38.103000 audit[2235]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.103000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff25c41220 a2=0 a3=7fff25c4120c items=0 ppid=2078 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.103000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:31:38.104000 audit[2236]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.104000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe04a43280 a2=0 a3=7ffe04a4326c items=0 ppid=2078 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.104000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:31:38.106000 audit[2238]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.106000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd6bdc74f0 a2=0 a3=7ffd6bdc74dc items=0 ppid=2078 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.106000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:31:38.109000 audit[2241]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.109000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffcd19f6810 a2=0 a3=7ffcd19f67fc items=0 ppid=2078 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.109000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:31:38.110000 audit[2242]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.110000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffc5e0fe40 a2=0 a3=7fffc5e0fe2c items=0 ppid=2078 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.110000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:31:38.112000 audit[2244]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.112000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd71e25500 a2=0 a3=7ffd71e254ec items=0 ppid=2078 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.112000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:31:38.113000 audit[2245]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.113000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe86a6ce0 a2=0 a3=7fffe86a6ccc items=0 ppid=2078 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.113000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:31:38.115000 audit[2247]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.115000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffde9e9d230 a2=0 a3=7ffde9e9d21c items=0 ppid=2078 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.115000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:31:38.118000 audit[2250]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2250 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.118000 audit[2250]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffedc0d4e80 a2=0 a3=7ffedc0d4e6c items=0 ppid=2078 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.118000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:31:38.121000 audit[2253]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.121000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe4cfc9d40 a2=0 a3=7ffe4cfc9d2c items=0 ppid=2078 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.121000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:31:38.122000 audit[2254]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.122000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcc0925fe0 a2=0 a3=7ffcc0925fcc items=0 ppid=2078 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.122000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:31:38.124000 audit[2256]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.124000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffdaf7b0800 a2=0 a3=7ffdaf7b07ec items=0 ppid=2078 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.124000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:31:38.127000 audit[2259]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2259 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.127000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffcba8a99e0 a2=0 a3=7ffcba8a99cc items=0 ppid=2078 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.127000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:31:38.128000 audit[2260]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.128000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff871e8f20 a2=0 a3=7fff871e8f0c items=0 ppid=2078 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.128000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:31:38.130000 audit[2262]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.130000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd2b2fbe50 a2=0 a3=7ffd2b2fbe3c items=0 ppid=2078 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.130000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:31:38.131000 audit[2263]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.131000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdd87fe470 a2=0 a3=7ffdd87fe45c items=0 ppid=2078 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.131000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:31:38.133000 audit[2265]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2265 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.133000 audit[2265]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd8555c150 a2=0 a3=7ffd8555c13c items=0 ppid=2078 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.133000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:31:38.135000 audit[2268]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:31:38.135000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe4d089f10 a2=0 a3=7ffe4d089efc items=0 ppid=2078 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.135000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:31:38.138000 audit[2270]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:31:38.138000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffed4ed0a80 a2=0 a3=7ffed4ed0a6c items=0 ppid=2078 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.138000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:38.138000 audit[2270]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:31:38.138000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffed4ed0a80 a2=0 a3=7ffed4ed0a6c items=0 ppid=2078 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.138000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:38.418311 kubelet[1964]: E0715 11:31:38.415175 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:39.370401 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount181205933.mount: Deactivated successfully. Jul 15 11:31:40.099755 env[1210]: time="2025-07-15T11:31:40.099705698Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:40.101982 env[1210]: time="2025-07-15T11:31:40.101957450Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:40.103856 env[1210]: time="2025-07-15T11:31:40.103811959Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:40.105697 env[1210]: time="2025-07-15T11:31:40.105659994Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:40.106192 env[1210]: time="2025-07-15T11:31:40.106163711Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 15 11:31:40.112295 env[1210]: time="2025-07-15T11:31:40.112252191Z" level=info msg="CreateContainer within sandbox \"6bec08172712d339b937090ca836a1d6828389578eb78d8de4345411acb417ce\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:31:40.125075 env[1210]: time="2025-07-15T11:31:40.125036273Z" level=info msg="CreateContainer within sandbox \"6bec08172712d339b937090ca836a1d6828389578eb78d8de4345411acb417ce\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"c0f6a2813e50d8b7a94bace3c0122048cd13d54a5a3649553600ed6233717c5c\"" Jul 15 11:31:40.125554 env[1210]: time="2025-07-15T11:31:40.125512417Z" level=info msg="StartContainer for \"c0f6a2813e50d8b7a94bace3c0122048cd13d54a5a3649553600ed6233717c5c\"" Jul 15 11:31:40.141857 systemd[1]: Started cri-containerd-c0f6a2813e50d8b7a94bace3c0122048cd13d54a5a3649553600ed6233717c5c.scope. Jul 15 11:31:40.154154 kernel: kauditd_printk_skb: 312 callbacks suppressed Jul 15 11:31:40.154249 kernel: audit: type=1400 audit(1752579100.149:896): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.154277 kernel: audit: type=1400 audit(1752579100.149:897): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.160403 kernel: audit: type=1400 audit(1752579100.149:898): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.163620 kernel: audit: type=1400 audit(1752579100.149:899): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.163693 kernel: audit: type=1400 audit(1752579100.149:900): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.166499 kernel: audit: type=1400 audit(1752579100.149:901): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.172655 kernel: audit: type=1400 audit(1752579100.149:902): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.172725 kernel: audit: type=1400 audit(1752579100.149:903): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.178375 kernel: audit: type=1400 audit(1752579100.149:904): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.181242 kernel: audit: type=1400 audit(1752579100.153:905): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit: BPF prog-id=111 op=LOAD Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2147 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330663661323831336535306438623761393462616365336330313232 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2147 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330663661323831336535306438623761393462616365336330313232 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.153000 audit: BPF prog-id=112 op=LOAD Jul 15 11:31:40.153000 audit[2278]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002efd90 items=0 ppid=2147 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330663661323831336535306438623761393462616365336330313232 Jul 15 11:31:40.155000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.155000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.155000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.155000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.155000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.155000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.155000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.155000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.155000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.155000 audit: BPF prog-id=113 op=LOAD Jul 15 11:31:40.155000 audit[2278]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002efdd8 items=0 ppid=2147 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330663661323831336535306438623761393462616365336330313232 Jul 15 11:31:40.159000 audit: BPF prog-id=113 op=UNLOAD Jul 15 11:31:40.159000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:40.159000 audit: BPF prog-id=114 op=LOAD Jul 15 11:31:40.159000 audit[2278]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00033e1e8 items=0 ppid=2147 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330663661323831336535306438623761393462616365336330313232 Jul 15 11:31:40.186243 update_engine[1202]: I0715 11:31:40.186210 1202 update_attempter.cc:509] Updating boot flags... Jul 15 11:31:40.299216 env[1210]: time="2025-07-15T11:31:40.299174039Z" level=info msg="StartContainer for \"c0f6a2813e50d8b7a94bace3c0122048cd13d54a5a3649553600ed6233717c5c\" returns successfully" Jul 15 11:31:40.443391 kubelet[1964]: I0715 11:31:40.443196 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-w6jrb" podStartSLOduration=3.4431788389999998 podStartE2EDuration="3.443178839s" podCreationTimestamp="2025-07-15 11:31:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:31:38.423352582 +0000 UTC m=+6.117640448" watchObservedRunningTime="2025-07-15 11:31:40.443178839 +0000 UTC m=+8.137466766" Jul 15 11:31:40.443391 kubelet[1964]: I0715 11:31:40.443308 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-m8dhb" podStartSLOduration=1.399325024 podStartE2EDuration="3.443303746s" podCreationTimestamp="2025-07-15 11:31:37 +0000 UTC" firstStartedPulling="2025-07-15 11:31:38.062857324 +0000 UTC m=+5.757145170" lastFinishedPulling="2025-07-15 11:31:40.106836046 +0000 UTC m=+7.801123892" observedRunningTime="2025-07-15 11:31:40.442011555 +0000 UTC m=+8.136299401" watchObservedRunningTime="2025-07-15 11:31:40.443303746 +0000 UTC m=+8.137591593" Jul 15 11:31:41.048643 kubelet[1964]: E0715 11:31:41.048605 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:41.152967 kubelet[1964]: E0715 11:31:41.152893 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:41.433041 kubelet[1964]: E0715 11:31:41.432899 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:41.433531 kubelet[1964]: E0715 11:31:41.433505 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:41.472694 kubelet[1964]: E0715 11:31:41.472643 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:42.435242 kubelet[1964]: E0715 11:31:42.435207 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:43.436656 kubelet[1964]: E0715 11:31:43.436609 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:45.193005 sudo[1346]: pam_unix(sudo:session): session closed for user root Jul 15 11:31:45.191000 audit[1346]: USER_END pid=1346 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:45.194004 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 15 11:31:45.194060 kernel: audit: type=1106 audit(1752579105.191:914): pid=1346 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:45.194794 sshd[1343]: pam_unix(sshd:session): session closed for user core Jul 15 11:31:45.192000 audit[1346]: CRED_DISP pid=1346 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:45.200797 kernel: audit: type=1104 audit(1752579105.192:915): pid=1346 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:31:45.200847 kernel: audit: type=1106 audit(1752579105.197:916): pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:45.197000 audit[1343]: USER_END pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:45.199821 systemd[1]: sshd@6-10.0.0.76:22-10.0.0.1:38116.service: Deactivated successfully. Jul 15 11:31:45.201220 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:31:45.201347 systemd[1]: session-7.scope: Consumed 5.296s CPU time. Jul 15 11:31:45.201974 systemd-logind[1201]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:31:45.202915 systemd-logind[1201]: Removed session 7. Jul 15 11:31:45.197000 audit[1343]: CRED_DISP pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:45.208066 kernel: audit: type=1104 audit(1752579105.197:917): pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:31:45.208115 kernel: audit: type=1131 audit(1752579105.198:918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.76:22-10.0.0.1:38116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:45.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.76:22-10.0.0.1:38116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:45.636000 audit[2379]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:45.636000 audit[2379]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdc76b7070 a2=0 a3=7ffdc76b705c items=0 ppid=2078 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:45.645258 kernel: audit: type=1325 audit(1752579105.636:919): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:45.645323 kernel: audit: type=1300 audit(1752579105.636:919): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdc76b7070 a2=0 a3=7ffdc76b705c items=0 ppid=2078 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:45.645347 kernel: audit: type=1327 audit(1752579105.636:919): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:45.636000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:45.648000 audit[2379]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:45.648000 audit[2379]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdc76b7070 a2=0 a3=0 items=0 ppid=2078 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:45.657060 kernel: audit: type=1325 audit(1752579105.648:920): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:45.657210 kernel: audit: type=1300 audit(1752579105.648:920): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdc76b7070 a2=0 a3=0 items=0 ppid=2078 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:45.648000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:45.690000 audit[2381]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2381 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:45.690000 audit[2381]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc325e88f0 a2=0 a3=7ffc325e88dc items=0 ppid=2078 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:45.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:45.695000 audit[2381]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2381 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:45.695000 audit[2381]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc325e88f0 a2=0 a3=0 items=0 ppid=2078 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:45.695000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:48.822000 audit[2383]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:48.822000 audit[2383]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffd44b00c60 a2=0 a3=7ffd44b00c4c items=0 ppid=2078 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:48.822000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:48.828000 audit[2383]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:48.828000 audit[2383]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd44b00c60 a2=0 a3=0 items=0 ppid=2078 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:48.828000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:48.839000 audit[2385]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2385 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:48.839000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffd2c2d54b0 a2=0 a3=7ffd2c2d549c items=0 ppid=2078 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:48.839000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:48.843000 audit[2385]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2385 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:48.843000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd2c2d54b0 a2=0 a3=0 items=0 ppid=2078 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:48.843000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:49.188773 systemd[1]: Created slice kubepods-besteffort-pod6f9a79f9_38e5_42f0_9c4f_1f4a413b5e79.slice. Jul 15 11:31:49.202274 kubelet[1964]: I0715 11:31:49.202212 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6f9a79f9-38e5-42f0-9c4f-1f4a413b5e79-tigera-ca-bundle\") pod \"calico-typha-97456cd68-88cb2\" (UID: \"6f9a79f9-38e5-42f0-9c4f-1f4a413b5e79\") " pod="calico-system/calico-typha-97456cd68-88cb2" Jul 15 11:31:49.202274 kubelet[1964]: I0715 11:31:49.202263 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c9rhw\" (UniqueName: \"kubernetes.io/projected/6f9a79f9-38e5-42f0-9c4f-1f4a413b5e79-kube-api-access-c9rhw\") pod \"calico-typha-97456cd68-88cb2\" (UID: \"6f9a79f9-38e5-42f0-9c4f-1f4a413b5e79\") " pod="calico-system/calico-typha-97456cd68-88cb2" Jul 15 11:31:49.202274 kubelet[1964]: I0715 11:31:49.202282 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/6f9a79f9-38e5-42f0-9c4f-1f4a413b5e79-typha-certs\") pod \"calico-typha-97456cd68-88cb2\" (UID: \"6f9a79f9-38e5-42f0-9c4f-1f4a413b5e79\") " pod="calico-system/calico-typha-97456cd68-88cb2" Jul 15 11:31:49.492685 kubelet[1964]: E0715 11:31:49.492555 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:49.493109 env[1210]: time="2025-07-15T11:31:49.493036074Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-97456cd68-88cb2,Uid:6f9a79f9-38e5-42f0-9c4f-1f4a413b5e79,Namespace:calico-system,Attempt:0,}" Jul 15 11:31:49.510211 env[1210]: time="2025-07-15T11:31:49.510090139Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:49.510211 env[1210]: time="2025-07-15T11:31:49.510162785Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:49.510211 env[1210]: time="2025-07-15T11:31:49.510172635Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:49.510405 env[1210]: time="2025-07-15T11:31:49.510319601Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/edd1bb3078c24ab47e1e327158bd0bed23520cd4e9a37ad34c22d898ccc76676 pid=2396 runtime=io.containerd.runc.v2 Jul 15 11:31:49.525169 systemd[1]: Started cri-containerd-edd1bb3078c24ab47e1e327158bd0bed23520cd4e9a37ad34c22d898ccc76676.scope. Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.535000 audit: BPF prog-id=115 op=LOAD Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2396 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564643162623330373863323461623437653165333237313538626430 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2396 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564643162623330373863323461623437653165333237313538626430 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit: BPF prog-id=116 op=LOAD Jul 15 11:31:49.536000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000259ce0 items=0 ppid=2396 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564643162623330373863323461623437653165333237313538626430 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit: BPF prog-id=117 op=LOAD Jul 15 11:31:49.536000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000259d28 items=0 ppid=2396 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564643162623330373863323461623437653165333237313538626430 Jul 15 11:31:49.536000 audit: BPF prog-id=117 op=UNLOAD Jul 15 11:31:49.536000 audit: BPF prog-id=116 op=UNLOAD Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.536000 audit: BPF prog-id=118 op=LOAD Jul 15 11:31:49.536000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003dc138 items=0 ppid=2396 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564643162623330373863323461623437653165333237313538626430 Jul 15 11:31:49.569598 env[1210]: time="2025-07-15T11:31:49.566527959Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-97456cd68-88cb2,Uid:6f9a79f9-38e5-42f0-9c4f-1f4a413b5e79,Namespace:calico-system,Attempt:0,} returns sandbox id \"edd1bb3078c24ab47e1e327158bd0bed23520cd4e9a37ad34c22d898ccc76676\"" Jul 15 11:31:49.569804 kubelet[1964]: E0715 11:31:49.568715 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:49.569860 env[1210]: time="2025-07-15T11:31:49.569679135Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:31:49.577501 systemd[1]: Created slice kubepods-besteffort-podeae5db6e_a6b8_4df1_90d0_aa8568ddfe78.slice. Jul 15 11:31:49.607068 kubelet[1964]: I0715 11:31:49.607018 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-xtables-lock\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607068 kubelet[1964]: I0715 11:31:49.607056 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t2p6f\" (UniqueName: \"kubernetes.io/projected/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-kube-api-access-t2p6f\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607068 kubelet[1964]: I0715 11:31:49.607072 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-lib-modules\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607266 kubelet[1964]: I0715 11:31:49.607086 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-cni-log-dir\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607266 kubelet[1964]: I0715 11:31:49.607104 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-policysync\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607266 kubelet[1964]: I0715 11:31:49.607137 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-tigera-ca-bundle\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607266 kubelet[1964]: I0715 11:31:49.607152 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-var-lib-calico\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607266 kubelet[1964]: I0715 11:31:49.607168 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-node-certs\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607381 kubelet[1964]: I0715 11:31:49.607237 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-cni-bin-dir\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607381 kubelet[1964]: I0715 11:31:49.607271 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-cni-net-dir\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607381 kubelet[1964]: I0715 11:31:49.607291 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-flexvol-driver-host\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.607381 kubelet[1964]: I0715 11:31:49.607342 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/eae5db6e-a6b8-4df1-90d0-aa8568ddfe78-var-run-calico\") pod \"calico-node-vjqgd\" (UID: \"eae5db6e-a6b8-4df1-90d0-aa8568ddfe78\") " pod="calico-system/calico-node-vjqgd" Jul 15 11:31:49.709472 kubelet[1964]: E0715 11:31:49.709439 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.709472 kubelet[1964]: W0715 11:31:49.709458 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.709472 kubelet[1964]: E0715 11:31:49.709487 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.710984 kubelet[1964]: E0715 11:31:49.710955 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.710984 kubelet[1964]: W0715 11:31:49.710981 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.711081 kubelet[1964]: E0715 11:31:49.711007 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.712875 kubelet[1964]: E0715 11:31:49.712844 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.712875 kubelet[1964]: W0715 11:31:49.712861 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.712875 kubelet[1964]: E0715 11:31:49.712870 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.714800 kubelet[1964]: E0715 11:31:49.714775 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.714800 kubelet[1964]: W0715 11:31:49.714792 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.714875 kubelet[1964]: E0715 11:31:49.714810 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.771637 kubelet[1964]: E0715 11:31:49.771500 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8kc9f" podUID="d2f1d298-58ec-4a3a-b674-a51540fedfbb" Jul 15 11:31:49.790982 kubelet[1964]: E0715 11:31:49.790905 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.790982 kubelet[1964]: W0715 11:31:49.790967 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.791281 kubelet[1964]: E0715 11:31:49.791005 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.791512 kubelet[1964]: E0715 11:31:49.791471 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.791512 kubelet[1964]: W0715 11:31:49.791502 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.791652 kubelet[1964]: E0715 11:31:49.791514 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.796276 kubelet[1964]: E0715 11:31:49.796241 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.796276 kubelet[1964]: W0715 11:31:49.796261 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.796276 kubelet[1964]: E0715 11:31:49.796272 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.796523 kubelet[1964]: E0715 11:31:49.796499 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.796523 kubelet[1964]: W0715 11:31:49.796513 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.796523 kubelet[1964]: E0715 11:31:49.796521 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.796679 kubelet[1964]: E0715 11:31:49.796652 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.796679 kubelet[1964]: W0715 11:31:49.796659 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.796679 kubelet[1964]: E0715 11:31:49.796665 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.796797 kubelet[1964]: E0715 11:31:49.796774 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.796797 kubelet[1964]: W0715 11:31:49.796787 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.796797 kubelet[1964]: E0715 11:31:49.796794 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.796924 kubelet[1964]: E0715 11:31:49.796902 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.796924 kubelet[1964]: W0715 11:31:49.796915 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.796924 kubelet[1964]: E0715 11:31:49.796922 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.797053 kubelet[1964]: E0715 11:31:49.797031 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.797053 kubelet[1964]: W0715 11:31:49.797044 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.797053 kubelet[1964]: E0715 11:31:49.797050 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.797216 kubelet[1964]: E0715 11:31:49.797194 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.797216 kubelet[1964]: W0715 11:31:49.797207 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.797216 kubelet[1964]: E0715 11:31:49.797214 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.797346 kubelet[1964]: E0715 11:31:49.797324 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.797346 kubelet[1964]: W0715 11:31:49.797337 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.797346 kubelet[1964]: E0715 11:31:49.797344 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.797476 kubelet[1964]: E0715 11:31:49.797454 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.797476 kubelet[1964]: W0715 11:31:49.797467 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.797476 kubelet[1964]: E0715 11:31:49.797474 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.797617 kubelet[1964]: E0715 11:31:49.797595 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.797617 kubelet[1964]: W0715 11:31:49.797608 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.797617 kubelet[1964]: E0715 11:31:49.797616 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.797873 kubelet[1964]: E0715 11:31:49.797730 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.797873 kubelet[1964]: W0715 11:31:49.797737 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.797873 kubelet[1964]: E0715 11:31:49.797743 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.797873 kubelet[1964]: E0715 11:31:49.797857 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.797873 kubelet[1964]: W0715 11:31:49.797862 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.797873 kubelet[1964]: E0715 11:31:49.797869 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.798167 kubelet[1964]: E0715 11:31:49.797984 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.798167 kubelet[1964]: W0715 11:31:49.797992 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.798167 kubelet[1964]: E0715 11:31:49.797999 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.798282 kubelet[1964]: E0715 11:31:49.798181 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.798282 kubelet[1964]: W0715 11:31:49.798188 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.798282 kubelet[1964]: E0715 11:31:49.798200 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.803280 kubelet[1964]: E0715 11:31:49.803244 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.803280 kubelet[1964]: W0715 11:31:49.803267 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.803280 kubelet[1964]: E0715 11:31:49.803282 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.806210 kubelet[1964]: E0715 11:31:49.806181 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.806210 kubelet[1964]: W0715 11:31:49.806200 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.806210 kubelet[1964]: E0715 11:31:49.806210 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.806438 kubelet[1964]: E0715 11:31:49.806415 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.806438 kubelet[1964]: W0715 11:31:49.806429 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.806438 kubelet[1964]: E0715 11:31:49.806438 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.806616 kubelet[1964]: E0715 11:31:49.806574 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.806616 kubelet[1964]: W0715 11:31:49.806580 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.806616 kubelet[1964]: E0715 11:31:49.806587 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.808966 kubelet[1964]: E0715 11:31:49.808945 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.808966 kubelet[1964]: W0715 11:31:49.808959 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.808966 kubelet[1964]: E0715 11:31:49.808968 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.809096 kubelet[1964]: I0715 11:31:49.808990 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/d2f1d298-58ec-4a3a-b674-a51540fedfbb-socket-dir\") pod \"csi-node-driver-8kc9f\" (UID: \"d2f1d298-58ec-4a3a-b674-a51540fedfbb\") " pod="calico-system/csi-node-driver-8kc9f" Jul 15 11:31:49.809297 kubelet[1964]: E0715 11:31:49.809275 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.809297 kubelet[1964]: W0715 11:31:49.809290 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.809297 kubelet[1964]: E0715 11:31:49.809300 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.809413 kubelet[1964]: I0715 11:31:49.809316 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qjq6p\" (UniqueName: \"kubernetes.io/projected/d2f1d298-58ec-4a3a-b674-a51540fedfbb-kube-api-access-qjq6p\") pod \"csi-node-driver-8kc9f\" (UID: \"d2f1d298-58ec-4a3a-b674-a51540fedfbb\") " pod="calico-system/csi-node-driver-8kc9f" Jul 15 11:31:49.809598 kubelet[1964]: E0715 11:31:49.809577 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.809598 kubelet[1964]: W0715 11:31:49.809591 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.809598 kubelet[1964]: E0715 11:31:49.809600 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.809714 kubelet[1964]: I0715 11:31:49.809619 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/d2f1d298-58ec-4a3a-b674-a51540fedfbb-varrun\") pod \"csi-node-driver-8kc9f\" (UID: \"d2f1d298-58ec-4a3a-b674-a51540fedfbb\") " pod="calico-system/csi-node-driver-8kc9f" Jul 15 11:31:49.809922 kubelet[1964]: E0715 11:31:49.809899 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.809922 kubelet[1964]: W0715 11:31:49.809915 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.810065 kubelet[1964]: E0715 11:31:49.809925 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.810065 kubelet[1964]: I0715 11:31:49.809939 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/d2f1d298-58ec-4a3a-b674-a51540fedfbb-registration-dir\") pod \"csi-node-driver-8kc9f\" (UID: \"d2f1d298-58ec-4a3a-b674-a51540fedfbb\") " pod="calico-system/csi-node-driver-8kc9f" Jul 15 11:31:49.810193 kubelet[1964]: E0715 11:31:49.810169 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.810193 kubelet[1964]: W0715 11:31:49.810179 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.810193 kubelet[1964]: E0715 11:31:49.810188 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.810295 kubelet[1964]: I0715 11:31:49.810204 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/d2f1d298-58ec-4a3a-b674-a51540fedfbb-kubelet-dir\") pod \"csi-node-driver-8kc9f\" (UID: \"d2f1d298-58ec-4a3a-b674-a51540fedfbb\") " pod="calico-system/csi-node-driver-8kc9f" Jul 15 11:31:49.810428 kubelet[1964]: E0715 11:31:49.810409 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.810428 kubelet[1964]: W0715 11:31:49.810423 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.810485 kubelet[1964]: E0715 11:31:49.810432 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.811168 kubelet[1964]: E0715 11:31:49.811110 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.811168 kubelet[1964]: W0715 11:31:49.811154 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.811168 kubelet[1964]: E0715 11:31:49.811163 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.811407 kubelet[1964]: E0715 11:31:49.811374 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.811407 kubelet[1964]: W0715 11:31:49.811391 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.811407 kubelet[1964]: E0715 11:31:49.811400 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.811602 kubelet[1964]: E0715 11:31:49.811585 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.811602 kubelet[1964]: W0715 11:31:49.811597 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.811602 kubelet[1964]: E0715 11:31:49.811605 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.811777 kubelet[1964]: E0715 11:31:49.811758 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.811777 kubelet[1964]: W0715 11:31:49.811768 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.811845 kubelet[1964]: E0715 11:31:49.811779 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.811965 kubelet[1964]: E0715 11:31:49.811951 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.811965 kubelet[1964]: W0715 11:31:49.811961 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.811965 kubelet[1964]: E0715 11:31:49.811968 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.812251 kubelet[1964]: E0715 11:31:49.812223 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.812251 kubelet[1964]: W0715 11:31:49.812238 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.812251 kubelet[1964]: E0715 11:31:49.812247 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.812501 kubelet[1964]: E0715 11:31:49.812463 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.812501 kubelet[1964]: W0715 11:31:49.812479 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.812501 kubelet[1964]: E0715 11:31:49.812496 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.812706 kubelet[1964]: E0715 11:31:49.812683 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.812706 kubelet[1964]: W0715 11:31:49.812696 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.812706 kubelet[1964]: E0715 11:31:49.812703 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.812888 kubelet[1964]: E0715 11:31:49.812866 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.812888 kubelet[1964]: W0715 11:31:49.812879 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.812888 kubelet[1964]: E0715 11:31:49.812888 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.856000 audit[2471]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2471 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:49.856000 audit[2471]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffaf6af910 a2=0 a3=7fffaf6af8fc items=0 ppid=2078 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.856000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:49.872000 audit[2471]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2471 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:49.872000 audit[2471]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffaf6af910 a2=0 a3=0 items=0 ppid=2078 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.872000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:49.881710 env[1210]: time="2025-07-15T11:31:49.881614249Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-vjqgd,Uid:eae5db6e-a6b8-4df1-90d0-aa8568ddfe78,Namespace:calico-system,Attempt:0,}" Jul 15 11:31:49.912532 kubelet[1964]: E0715 11:31:49.911964 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.912532 kubelet[1964]: W0715 11:31:49.912018 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.912532 kubelet[1964]: E0715 11:31:49.912067 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.912854 env[1210]: time="2025-07-15T11:31:49.912607090Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:31:49.912854 env[1210]: time="2025-07-15T11:31:49.912815062Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:31:49.912920 env[1210]: time="2025-07-15T11:31:49.912859136Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:31:49.912959 kubelet[1964]: E0715 11:31:49.912919 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.912959 kubelet[1964]: W0715 11:31:49.912944 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.913064 kubelet[1964]: E0715 11:31:49.912962 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.913858 kubelet[1964]: E0715 11:31:49.913837 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.913858 kubelet[1964]: W0715 11:31:49.913852 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.913943 kubelet[1964]: E0715 11:31:49.913863 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.914200 env[1210]: time="2025-07-15T11:31:49.914090118Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a1b74b7e28b4590c641c846d00ab45ba3bd2df100c72be75ebf23e23d50b6dc0 pid=2478 runtime=io.containerd.runc.v2 Jul 15 11:31:49.914268 kubelet[1964]: E0715 11:31:49.914226 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.914268 kubelet[1964]: W0715 11:31:49.914234 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.914268 kubelet[1964]: E0715 11:31:49.914247 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.915848 kubelet[1964]: E0715 11:31:49.915810 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.915848 kubelet[1964]: W0715 11:31:49.915827 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.915848 kubelet[1964]: E0715 11:31:49.915835 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.917092 kubelet[1964]: E0715 11:31:49.916899 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.917092 kubelet[1964]: W0715 11:31:49.916955 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.917092 kubelet[1964]: E0715 11:31:49.917006 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.917296 kubelet[1964]: E0715 11:31:49.917273 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.917296 kubelet[1964]: W0715 11:31:49.917286 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.917296 kubelet[1964]: E0715 11:31:49.917294 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.917528 kubelet[1964]: E0715 11:31:49.917506 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.917528 kubelet[1964]: W0715 11:31:49.917519 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.917528 kubelet[1964]: E0715 11:31:49.917526 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.920565 kubelet[1964]: E0715 11:31:49.918383 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.920565 kubelet[1964]: W0715 11:31:49.918409 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.920565 kubelet[1964]: E0715 11:31:49.918432 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.920565 kubelet[1964]: E0715 11:31:49.918883 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.920565 kubelet[1964]: W0715 11:31:49.918913 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.920565 kubelet[1964]: E0715 11:31:49.918982 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.920565 kubelet[1964]: E0715 11:31:49.919394 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.920565 kubelet[1964]: W0715 11:31:49.919416 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.920565 kubelet[1964]: E0715 11:31:49.919441 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.920565 kubelet[1964]: E0715 11:31:49.920416 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.921002 kubelet[1964]: W0715 11:31:49.920427 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.921002 kubelet[1964]: E0715 11:31:49.920436 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.921372 kubelet[1964]: E0715 11:31:49.921159 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.921372 kubelet[1964]: W0715 11:31:49.921179 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.921372 kubelet[1964]: E0715 11:31:49.921187 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.921649 kubelet[1964]: E0715 11:31:49.921540 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.921649 kubelet[1964]: W0715 11:31:49.921550 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.921649 kubelet[1964]: E0715 11:31:49.921558 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.926540 kubelet[1964]: E0715 11:31:49.921826 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.926540 kubelet[1964]: W0715 11:31:49.921837 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.926540 kubelet[1964]: E0715 11:31:49.921845 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.926862 kubelet[1964]: E0715 11:31:49.926845 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.926950 kubelet[1964]: W0715 11:31:49.926934 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.927060 kubelet[1964]: E0715 11:31:49.927040 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.929726 kubelet[1964]: E0715 11:31:49.929709 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.929911 kubelet[1964]: W0715 11:31:49.929867 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.930087 kubelet[1964]: E0715 11:31:49.930049 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.931641 kubelet[1964]: E0715 11:31:49.931579 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.931641 kubelet[1964]: W0715 11:31:49.931608 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.931641 kubelet[1964]: E0715 11:31:49.931632 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.932117 kubelet[1964]: E0715 11:31:49.932086 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.932117 kubelet[1964]: W0715 11:31:49.932103 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.932117 kubelet[1964]: E0715 11:31:49.932112 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.934291 kubelet[1964]: E0715 11:31:49.933382 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.934291 kubelet[1964]: W0715 11:31:49.933395 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.934291 kubelet[1964]: E0715 11:31:49.933403 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.934291 kubelet[1964]: E0715 11:31:49.933755 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.934291 kubelet[1964]: W0715 11:31:49.933770 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.934291 kubelet[1964]: E0715 11:31:49.933778 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.936119 kubelet[1964]: E0715 11:31:49.935885 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.936119 kubelet[1964]: W0715 11:31:49.935900 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.936119 kubelet[1964]: E0715 11:31:49.935915 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.937749 kubelet[1964]: E0715 11:31:49.937701 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.937856 kubelet[1964]: W0715 11:31:49.937776 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.937856 kubelet[1964]: E0715 11:31:49.937808 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.939701 kubelet[1964]: E0715 11:31:49.939080 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.939701 kubelet[1964]: W0715 11:31:49.939687 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.939701 kubelet[1964]: E0715 11:31:49.939699 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.948966 kubelet[1964]: E0715 11:31:49.945263 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.948966 kubelet[1964]: W0715 11:31:49.948894 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.948966 kubelet[1964]: E0715 11:31:49.948921 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.959496 kubelet[1964]: E0715 11:31:49.958843 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:49.959563 kubelet[1964]: W0715 11:31:49.959500 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:49.959563 kubelet[1964]: E0715 11:31:49.959518 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:49.966300 systemd[1]: Started cri-containerd-a1b74b7e28b4590c641c846d00ab45ba3bd2df100c72be75ebf23e23d50b6dc0.scope. Jul 15 11:31:49.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.992000 audit: BPF prog-id=119 op=LOAD Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2478 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734623765323862343539306336343163383436643030616234 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2478 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734623765323862343539306336343163383436643030616234 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.994000 audit: BPF prog-id=120 op=LOAD Jul 15 11:31:49.994000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003893a0 items=0 ppid=2478 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734623765323862343539306336343163383436643030616234 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit: BPF prog-id=121 op=LOAD Jul 15 11:31:49.995000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003893e8 items=0 ppid=2478 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734623765323862343539306336343163383436643030616234 Jul 15 11:31:49.995000 audit: BPF prog-id=121 op=UNLOAD Jul 15 11:31:49.995000 audit: BPF prog-id=120 op=UNLOAD Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:49.995000 audit: BPF prog-id=122 op=LOAD Jul 15 11:31:49.995000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003897f8 items=0 ppid=2478 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:49.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734623765323862343539306336343163383436643030616234 Jul 15 11:31:50.031237 env[1210]: time="2025-07-15T11:31:50.029975585Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-vjqgd,Uid:eae5db6e-a6b8-4df1-90d0-aa8568ddfe78,Namespace:calico-system,Attempt:0,} returns sandbox id \"a1b74b7e28b4590c641c846d00ab45ba3bd2df100c72be75ebf23e23d50b6dc0\"" Jul 15 11:31:50.312257 systemd[1]: run-containerd-runc-k8s.io-edd1bb3078c24ab47e1e327158bd0bed23520cd4e9a37ad34c22d898ccc76676-runc.cftIty.mount: Deactivated successfully. Jul 15 11:31:51.396541 kubelet[1964]: E0715 11:31:51.396149 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8kc9f" podUID="d2f1d298-58ec-4a3a-b674-a51540fedfbb" Jul 15 11:31:51.432605 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1331231011.mount: Deactivated successfully. Jul 15 11:31:53.396282 kubelet[1964]: E0715 11:31:53.396232 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8kc9f" podUID="d2f1d298-58ec-4a3a-b674-a51540fedfbb" Jul 15 11:31:53.658731 env[1210]: time="2025-07-15T11:31:53.658611882Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:53.660432 env[1210]: time="2025-07-15T11:31:53.660386887Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:53.661938 env[1210]: time="2025-07-15T11:31:53.661907422Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:53.663335 env[1210]: time="2025-07-15T11:31:53.663304926Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:53.663734 env[1210]: time="2025-07-15T11:31:53.663700451Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 15 11:31:53.664545 env[1210]: time="2025-07-15T11:31:53.664524714Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:31:53.683057 env[1210]: time="2025-07-15T11:31:53.683018383Z" level=info msg="CreateContainer within sandbox \"edd1bb3078c24ab47e1e327158bd0bed23520cd4e9a37ad34c22d898ccc76676\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:31:53.698082 env[1210]: time="2025-07-15T11:31:53.698033917Z" level=info msg="CreateContainer within sandbox \"edd1bb3078c24ab47e1e327158bd0bed23520cd4e9a37ad34c22d898ccc76676\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"6637c80d0435aaf638a8ba0bf21ae179eeac8c4422418f31ade497ec6606bc75\"" Jul 15 11:31:53.698547 env[1210]: time="2025-07-15T11:31:53.698522066Z" level=info msg="StartContainer for \"6637c80d0435aaf638a8ba0bf21ae179eeac8c4422418f31ade497ec6606bc75\"" Jul 15 11:31:53.713768 systemd[1]: Started cri-containerd-6637c80d0435aaf638a8ba0bf21ae179eeac8c4422418f31ade497ec6606bc75.scope. Jul 15 11:31:53.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.728561 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 15 11:31:53.728657 kernel: audit: type=1400 audit(1752579113.726:965): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.734752 kernel: audit: type=1400 audit(1752579113.726:966): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.734799 kernel: audit: type=1400 audit(1752579113.726:967): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.740604 kernel: audit: type=1400 audit(1752579113.726:968): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.740649 kernel: audit: type=1400 audit(1752579113.726:969): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.746872 kernel: audit: type=1400 audit(1752579113.726:970): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.746925 kernel: audit: type=1400 audit(1752579113.726:971): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.752778 kernel: audit: type=1400 audit(1752579113.726:972): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.752827 kernel: audit: type=1400 audit(1752579113.726:973): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.755508 kernel: audit: type=1400 audit(1752579113.730:974): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit: BPF prog-id=123 op=LOAD Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2396 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:53.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333763383064303433356161663633386138626130626632316165 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2396 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:53.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333763383064303433356161663633386138626130626632316165 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.730000 audit: BPF prog-id=124 op=LOAD Jul 15 11:31:53.730000 audit[2551]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002a9a10 items=0 ppid=2396 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:53.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333763383064303433356161663633386138626130626632316165 Jul 15 11:31:53.736000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.736000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.736000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.736000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.736000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.736000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.736000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.736000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.736000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.736000 audit: BPF prog-id=125 op=LOAD Jul 15 11:31:53.736000 audit[2551]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002a9a58 items=0 ppid=2396 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:53.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333763383064303433356161663633386138626130626632316165 Jul 15 11:31:53.742000 audit: BPF prog-id=125 op=UNLOAD Jul 15 11:31:53.742000 audit: BPF prog-id=124 op=UNLOAD Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:53.742000 audit: BPF prog-id=126 op=LOAD Jul 15 11:31:53.742000 audit[2551]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002a9e68 items=0 ppid=2396 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:53.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333763383064303433356161663633386138626130626632316165 Jul 15 11:31:53.779748 env[1210]: time="2025-07-15T11:31:53.779697579Z" level=info msg="StartContainer for \"6637c80d0435aaf638a8ba0bf21ae179eeac8c4422418f31ade497ec6606bc75\" returns successfully" Jul 15 11:31:54.472608 kubelet[1964]: E0715 11:31:54.472574 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:54.484555 kubelet[1964]: I0715 11:31:54.484478 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-97456cd68-88cb2" podStartSLOduration=1.389498654 podStartE2EDuration="5.48446426s" podCreationTimestamp="2025-07-15 11:31:49 +0000 UTC" firstStartedPulling="2025-07-15 11:31:49.569391913 +0000 UTC m=+17.263679759" lastFinishedPulling="2025-07-15 11:31:53.664357519 +0000 UTC m=+21.358645365" observedRunningTime="2025-07-15 11:31:54.48171991 +0000 UTC m=+22.176007756" watchObservedRunningTime="2025-07-15 11:31:54.48446426 +0000 UTC m=+22.178752106" Jul 15 11:31:54.539906 kubelet[1964]: E0715 11:31:54.539870 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.539906 kubelet[1964]: W0715 11:31:54.539892 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.539906 kubelet[1964]: E0715 11:31:54.539912 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.540169 kubelet[1964]: E0715 11:31:54.540043 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.540169 kubelet[1964]: W0715 11:31:54.540050 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.540169 kubelet[1964]: E0715 11:31:54.540057 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.540351 kubelet[1964]: E0715 11:31:54.540325 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.540351 kubelet[1964]: W0715 11:31:54.540337 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.540351 kubelet[1964]: E0715 11:31:54.540345 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.540577 kubelet[1964]: E0715 11:31:54.540537 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.540577 kubelet[1964]: W0715 11:31:54.540548 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.540577 kubelet[1964]: E0715 11:31:54.540555 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.540690 kubelet[1964]: E0715 11:31:54.540676 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.540690 kubelet[1964]: W0715 11:31:54.540685 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.540690 kubelet[1964]: E0715 11:31:54.540691 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.540836 kubelet[1964]: E0715 11:31:54.540823 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.540836 kubelet[1964]: W0715 11:31:54.540833 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.540893 kubelet[1964]: E0715 11:31:54.540840 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.541058 kubelet[1964]: E0715 11:31:54.541029 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.541058 kubelet[1964]: W0715 11:31:54.541047 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.541058 kubelet[1964]: E0715 11:31:54.541054 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.541245 kubelet[1964]: E0715 11:31:54.541220 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.541245 kubelet[1964]: W0715 11:31:54.541234 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.541245 kubelet[1964]: E0715 11:31:54.541244 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.541500 kubelet[1964]: E0715 11:31:54.541471 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.541530 kubelet[1964]: W0715 11:31:54.541493 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.541559 kubelet[1964]: E0715 11:31:54.541535 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.541844 kubelet[1964]: E0715 11:31:54.541826 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.541844 kubelet[1964]: W0715 11:31:54.541838 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.541844 kubelet[1964]: E0715 11:31:54.541847 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.542042 kubelet[1964]: E0715 11:31:54.542027 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.542042 kubelet[1964]: W0715 11:31:54.542039 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.542133 kubelet[1964]: E0715 11:31:54.542048 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.542277 kubelet[1964]: E0715 11:31:54.542254 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.542277 kubelet[1964]: W0715 11:31:54.542269 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.542277 kubelet[1964]: E0715 11:31:54.542279 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.542554 kubelet[1964]: E0715 11:31:54.542524 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.542554 kubelet[1964]: W0715 11:31:54.542536 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.542554 kubelet[1964]: E0715 11:31:54.542546 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.542758 kubelet[1964]: E0715 11:31:54.542734 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.542758 kubelet[1964]: W0715 11:31:54.542746 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.542758 kubelet[1964]: E0715 11:31:54.542755 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.542977 kubelet[1964]: E0715 11:31:54.542960 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.542977 kubelet[1964]: W0715 11:31:54.542972 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.543051 kubelet[1964]: E0715 11:31:54.542982 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.553326 kubelet[1964]: E0715 11:31:54.553301 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.553326 kubelet[1964]: W0715 11:31:54.553315 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.553326 kubelet[1964]: E0715 11:31:54.553326 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.553560 kubelet[1964]: E0715 11:31:54.553546 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.553560 kubelet[1964]: W0715 11:31:54.553555 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.553560 kubelet[1964]: E0715 11:31:54.553563 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.553795 kubelet[1964]: E0715 11:31:54.553766 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.553795 kubelet[1964]: W0715 11:31:54.553785 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.553795 kubelet[1964]: E0715 11:31:54.553795 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.553950 kubelet[1964]: E0715 11:31:54.553936 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.553950 kubelet[1964]: W0715 11:31:54.553946 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.554000 kubelet[1964]: E0715 11:31:54.553952 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.554085 kubelet[1964]: E0715 11:31:54.554067 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.554085 kubelet[1964]: W0715 11:31:54.554076 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.554085 kubelet[1964]: E0715 11:31:54.554082 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.554255 kubelet[1964]: E0715 11:31:54.554239 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.554255 kubelet[1964]: W0715 11:31:54.554248 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.554255 kubelet[1964]: E0715 11:31:54.554255 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.554524 kubelet[1964]: E0715 11:31:54.554506 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.554524 kubelet[1964]: W0715 11:31:54.554519 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.554600 kubelet[1964]: E0715 11:31:54.554531 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.554719 kubelet[1964]: E0715 11:31:54.554703 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.554751 kubelet[1964]: W0715 11:31:54.554724 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.554751 kubelet[1964]: E0715 11:31:54.554733 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.554932 kubelet[1964]: E0715 11:31:54.554902 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.554932 kubelet[1964]: W0715 11:31:54.554912 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.554932 kubelet[1964]: E0715 11:31:54.554920 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.555108 kubelet[1964]: E0715 11:31:54.555094 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.555108 kubelet[1964]: W0715 11:31:54.555102 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.555108 kubelet[1964]: E0715 11:31:54.555108 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.555303 kubelet[1964]: E0715 11:31:54.555284 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.555303 kubelet[1964]: W0715 11:31:54.555296 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.555303 kubelet[1964]: E0715 11:31:54.555305 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.555624 kubelet[1964]: E0715 11:31:54.555605 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.555624 kubelet[1964]: W0715 11:31:54.555618 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.555624 kubelet[1964]: E0715 11:31:54.555627 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.555808 kubelet[1964]: E0715 11:31:54.555793 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.555808 kubelet[1964]: W0715 11:31:54.555803 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.555862 kubelet[1964]: E0715 11:31:54.555810 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.556018 kubelet[1964]: E0715 11:31:54.556003 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.556018 kubelet[1964]: W0715 11:31:54.556012 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.556018 kubelet[1964]: E0715 11:31:54.556019 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.556218 kubelet[1964]: E0715 11:31:54.556202 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.556218 kubelet[1964]: W0715 11:31:54.556216 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.556288 kubelet[1964]: E0715 11:31:54.556227 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.556451 kubelet[1964]: E0715 11:31:54.556435 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.556451 kubelet[1964]: W0715 11:31:54.556445 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.556451 kubelet[1964]: E0715 11:31:54.556452 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.556744 kubelet[1964]: E0715 11:31:54.556719 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.556744 kubelet[1964]: W0715 11:31:54.556733 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.556744 kubelet[1964]: E0715 11:31:54.556743 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.556937 kubelet[1964]: E0715 11:31:54.556921 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:31:54.556937 kubelet[1964]: W0715 11:31:54.556931 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:31:54.556937 kubelet[1964]: E0715 11:31:54.556938 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:31:54.967304 env[1210]: time="2025-07-15T11:31:54.967245564Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:54.969707 env[1210]: time="2025-07-15T11:31:54.969642299Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:54.971110 env[1210]: time="2025-07-15T11:31:54.971079366Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:54.972540 env[1210]: time="2025-07-15T11:31:54.972513487Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:31:54.972936 env[1210]: time="2025-07-15T11:31:54.972910344Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 15 11:31:54.977078 env[1210]: time="2025-07-15T11:31:54.977050684Z" level=info msg="CreateContainer within sandbox \"a1b74b7e28b4590c641c846d00ab45ba3bd2df100c72be75ebf23e23d50b6dc0\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:31:54.991809 env[1210]: time="2025-07-15T11:31:54.991759441Z" level=info msg="CreateContainer within sandbox \"a1b74b7e28b4590c641c846d00ab45ba3bd2df100c72be75ebf23e23d50b6dc0\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"a9f049f347a8910f37e150cba44723443e688fd650550447691aa4736122b984\"" Jul 15 11:31:54.992266 env[1210]: time="2025-07-15T11:31:54.992241199Z" level=info msg="StartContainer for \"a9f049f347a8910f37e150cba44723443e688fd650550447691aa4736122b984\"" Jul 15 11:31:55.015653 systemd[1]: Started cri-containerd-a9f049f347a8910f37e150cba44723443e688fd650550447691aa4736122b984.scope. Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f5f3358fcf8 items=0 ppid=2478 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:55.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139663034396633343761383931306633376531353063626134343732 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit: BPF prog-id=127 op=LOAD Jul 15 11:31:55.029000 audit[2626]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000962b8 items=0 ppid=2478 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:55.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139663034396633343761383931306633376531353063626134343732 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit: BPF prog-id=128 op=LOAD Jul 15 11:31:55.029000 audit[2626]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000096308 items=0 ppid=2478 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:55.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139663034396633343761383931306633376531353063626134343732 Jul 15 11:31:55.029000 audit: BPF prog-id=128 op=UNLOAD Jul 15 11:31:55.029000 audit: BPF prog-id=127 op=UNLOAD Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:31:55.029000 audit: BPF prog-id=129 op=LOAD Jul 15 11:31:55.029000 audit[2626]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000096398 items=0 ppid=2478 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:55.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139663034396633343761383931306633376531353063626134343732 Jul 15 11:31:55.043286 env[1210]: time="2025-07-15T11:31:55.043201791Z" level=info msg="StartContainer for \"a9f049f347a8910f37e150cba44723443e688fd650550447691aa4736122b984\" returns successfully" Jul 15 11:31:55.050195 systemd[1]: cri-containerd-a9f049f347a8910f37e150cba44723443e688fd650550447691aa4736122b984.scope: Deactivated successfully. Jul 15 11:31:55.053000 audit: BPF prog-id=129 op=UNLOAD Jul 15 11:31:55.396434 kubelet[1964]: E0715 11:31:55.396287 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8kc9f" podUID="d2f1d298-58ec-4a3a-b674-a51540fedfbb" Jul 15 11:31:55.482330 env[1210]: time="2025-07-15T11:31:55.482260013Z" level=info msg="shim disconnected" id=a9f049f347a8910f37e150cba44723443e688fd650550447691aa4736122b984 Jul 15 11:31:55.482330 env[1210]: time="2025-07-15T11:31:55.482321658Z" level=warning msg="cleaning up after shim disconnected" id=a9f049f347a8910f37e150cba44723443e688fd650550447691aa4736122b984 namespace=k8s.io Jul 15 11:31:55.482330 env[1210]: time="2025-07-15T11:31:55.482340505Z" level=info msg="cleaning up dead shim" Jul 15 11:31:55.483825 kubelet[1964]: I0715 11:31:55.483797 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:31:55.484207 kubelet[1964]: E0715 11:31:55.484185 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:55.496547 env[1210]: time="2025-07-15T11:31:55.496483258Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:31:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2665 runtime=io.containerd.runc.v2\n" Jul 15 11:31:55.675229 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a9f049f347a8910f37e150cba44723443e688fd650550447691aa4736122b984-rootfs.mount: Deactivated successfully. Jul 15 11:31:56.487512 env[1210]: time="2025-07-15T11:31:56.487444979Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:31:57.396645 kubelet[1964]: E0715 11:31:57.396578 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8kc9f" podUID="d2f1d298-58ec-4a3a-b674-a51540fedfbb" Jul 15 11:31:58.925595 kubelet[1964]: E0715 11:31:58.924778 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:31:58.945000 audit[2684]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:58.956581 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 15 11:31:58.956660 kernel: audit: type=1325 audit(1752579118.945:990): table=filter:99 family=2 entries=21 op=nft_register_rule pid=2684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:58.956686 kernel: audit: type=1300 audit(1752579118.945:990): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffbd60c720 a2=0 a3=7fffbd60c70c items=0 ppid=2078 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:58.956705 kernel: audit: type=1327 audit(1752579118.945:990): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:58.945000 audit[2684]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffbd60c720 a2=0 a3=7fffbd60c70c items=0 ppid=2078 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:58.945000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:58.958000 audit[2684]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:58.958000 audit[2684]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fffbd60c720 a2=0 a3=7fffbd60c70c items=0 ppid=2078 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:58.966622 kernel: audit: type=1325 audit(1752579118.958:991): table=nat:100 family=2 entries=19 op=nft_register_chain pid=2684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:58.966673 kernel: audit: type=1300 audit(1752579118.958:991): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fffbd60c720 a2=0 a3=7fffbd60c70c items=0 ppid=2078 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:58.966696 kernel: audit: type=1327 audit(1752579118.958:991): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:58.958000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:59.395919 kubelet[1964]: E0715 11:31:59.395875 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8kc9f" podUID="d2f1d298-58ec-4a3a-b674-a51540fedfbb" Jul 15 11:32:00.233891 env[1210]: time="2025-07-15T11:32:00.233839902Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:00.235569 env[1210]: time="2025-07-15T11:32:00.235534669Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:00.237168 env[1210]: time="2025-07-15T11:32:00.237083723Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:00.238848 env[1210]: time="2025-07-15T11:32:00.238798789Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:00.238915 env[1210]: time="2025-07-15T11:32:00.238861677Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 15 11:32:00.247206 env[1210]: time="2025-07-15T11:32:00.247156718Z" level=info msg="CreateContainer within sandbox \"a1b74b7e28b4590c641c846d00ab45ba3bd2df100c72be75ebf23e23d50b6dc0\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:32:00.260810 env[1210]: time="2025-07-15T11:32:00.260759633Z" level=info msg="CreateContainer within sandbox \"a1b74b7e28b4590c641c846d00ab45ba3bd2df100c72be75ebf23e23d50b6dc0\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"b8009af4191d04465440ac4b3e40616859efa1baafbd6edf0bf5aa9ca7027344\"" Jul 15 11:32:00.261252 env[1210]: time="2025-07-15T11:32:00.261216522Z" level=info msg="StartContainer for \"b8009af4191d04465440ac4b3e40616859efa1baafbd6edf0bf5aa9ca7027344\"" Jul 15 11:32:00.282000 systemd[1]: run-containerd-runc-k8s.io-b8009af4191d04465440ac4b3e40616859efa1baafbd6edf0bf5aa9ca7027344-runc.18Chz5.mount: Deactivated successfully. Jul 15 11:32:00.283362 systemd[1]: Started cri-containerd-b8009af4191d04465440ac4b3e40616859efa1baafbd6edf0bf5aa9ca7027344.scope. Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f77219ee008 items=0 ppid=2478 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:00.315225 kernel: audit: type=1400 audit(1752579120.306:992): avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.315307 kernel: audit: type=1300 audit(1752579120.306:992): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f77219ee008 items=0 ppid=2478 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:00.315333 kernel: audit: type=1327 audit(1752579120.306:992): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303039616634313931643034343635343430616334623365343036 Jul 15 11:32:00.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303039616634313931643034343635343430616334623365343036 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.321821 kernel: audit: type=1400 audit(1752579120.306:993): avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.306000 audit: BPF prog-id=130 op=LOAD Jul 15 11:32:00.306000 audit[2692]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c01e8 items=0 ppid=2478 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:00.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303039616634313931643034343635343430616334623365343036 Jul 15 11:32:00.314000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.314000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.314000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.314000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.314000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.314000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.314000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.314000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.314000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.314000 audit: BPF prog-id=131 op=LOAD Jul 15 11:32:00.314000 audit[2692]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0003c0238 items=0 ppid=2478 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:00.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303039616634313931643034343635343430616334623365343036 Jul 15 11:32:00.320000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:32:00.320000 audit: BPF prog-id=130 op=UNLOAD Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { perfmon } for pid=2692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:00.320000 audit: BPF prog-id=132 op=LOAD Jul 15 11:32:00.320000 audit[2692]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003c02c8 items=0 ppid=2478 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:00.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303039616634313931643034343635343430616334623365343036 Jul 15 11:32:00.509249 env[1210]: time="2025-07-15T11:32:00.506987483Z" level=info msg="StartContainer for \"b8009af4191d04465440ac4b3e40616859efa1baafbd6edf0bf5aa9ca7027344\" returns successfully" Jul 15 11:32:01.398600 kubelet[1964]: E0715 11:32:01.398533 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8kc9f" podUID="d2f1d298-58ec-4a3a-b674-a51540fedfbb" Jul 15 11:32:01.474726 env[1210]: time="2025-07-15T11:32:01.474644707Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:32:01.476586 systemd[1]: cri-containerd-b8009af4191d04465440ac4b3e40616859efa1baafbd6edf0bf5aa9ca7027344.scope: Deactivated successfully. Jul 15 11:32:01.480000 audit: BPF prog-id=132 op=UNLOAD Jul 15 11:32:01.495616 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b8009af4191d04465440ac4b3e40616859efa1baafbd6edf0bf5aa9ca7027344-rootfs.mount: Deactivated successfully. Jul 15 11:32:01.501890 env[1210]: time="2025-07-15T11:32:01.501842571Z" level=info msg="shim disconnected" id=b8009af4191d04465440ac4b3e40616859efa1baafbd6edf0bf5aa9ca7027344 Jul 15 11:32:01.502007 env[1210]: time="2025-07-15T11:32:01.501896943Z" level=warning msg="cleaning up after shim disconnected" id=b8009af4191d04465440ac4b3e40616859efa1baafbd6edf0bf5aa9ca7027344 namespace=k8s.io Jul 15 11:32:01.502007 env[1210]: time="2025-07-15T11:32:01.501915628Z" level=info msg="cleaning up dead shim" Jul 15 11:32:01.507929 env[1210]: time="2025-07-15T11:32:01.507895824Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:32:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2733 runtime=io.containerd.runc.v2\n" Jul 15 11:32:01.519015 env[1210]: time="2025-07-15T11:32:01.518952004Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:32:01.538107 kubelet[1964]: I0715 11:32:01.538075 1964 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 15 11:32:01.572816 systemd[1]: Created slice kubepods-besteffort-pod6ed339ad_27b3_4a4b_aac6_c54676ad507d.slice. Jul 15 11:32:01.578296 systemd[1]: Created slice kubepods-besteffort-pod46ad7566_4737_4434_a1b9_fdf79d3f5c45.slice. Jul 15 11:32:01.585307 systemd[1]: Created slice kubepods-besteffort-pod08dca42d_99cd_4d6c_a05f_812cbc0e64a4.slice. Jul 15 11:32:01.591110 systemd[1]: Created slice kubepods-burstable-pod41ea2cb5_2a81_4a97_91f8_b3f0252dcaaf.slice. Jul 15 11:32:01.599101 systemd[1]: Created slice kubepods-burstable-podc9724c60_b989_4af1_8667_515bc34b0af7.slice. Jul 15 11:32:01.603373 systemd[1]: Created slice kubepods-besteffort-pod1ba02b75_63a4_49fb_8a4b_fc2ae5ba777c.slice. Jul 15 11:32:01.608078 systemd[1]: Created slice kubepods-besteffort-podc7061ccf_2f9c_4d34_9c87_a58c506705c4.slice. Jul 15 11:32:01.628942 kubelet[1964]: I0715 11:32:01.628883 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rpssx\" (UniqueName: \"kubernetes.io/projected/c9724c60-b989-4af1-8667-515bc34b0af7-kube-api-access-rpssx\") pod \"coredns-674b8bbfcf-v87x5\" (UID: \"c9724c60-b989-4af1-8667-515bc34b0af7\") " pod="kube-system/coredns-674b8bbfcf-v87x5" Jul 15 11:32:01.628942 kubelet[1964]: I0715 11:32:01.628935 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/c9724c60-b989-4af1-8667-515bc34b0af7-config-volume\") pod \"coredns-674b8bbfcf-v87x5\" (UID: \"c9724c60-b989-4af1-8667-515bc34b0af7\") " pod="kube-system/coredns-674b8bbfcf-v87x5" Jul 15 11:32:01.629121 kubelet[1964]: I0715 11:32:01.628953 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c-goldmane-key-pair\") pod \"goldmane-768f4c5c69-qw2q7\" (UID: \"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c\") " pod="calico-system/goldmane-768f4c5c69-qw2q7" Jul 15 11:32:01.629121 kubelet[1964]: I0715 11:32:01.628967 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/08dca42d-99cd-4d6c-a05f-812cbc0e64a4-calico-apiserver-certs\") pod \"calico-apiserver-6ffb65f685-f9jbv\" (UID: \"08dca42d-99cd-4d6c-a05f-812cbc0e64a4\") " pod="calico-apiserver/calico-apiserver-6ffb65f685-f9jbv" Jul 15 11:32:01.629121 kubelet[1964]: I0715 11:32:01.628981 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mqkmm\" (UniqueName: \"kubernetes.io/projected/46ad7566-4737-4434-a1b9-fdf79d3f5c45-kube-api-access-mqkmm\") pod \"whisker-5fd9ddd4f6-4858p\" (UID: \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\") " pod="calico-system/whisker-5fd9ddd4f6-4858p" Jul 15 11:32:01.629121 kubelet[1964]: I0715 11:32:01.628997 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cq2c4\" (UniqueName: \"kubernetes.io/projected/6ed339ad-27b3-4a4b-aac6-c54676ad507d-kube-api-access-cq2c4\") pod \"calico-kube-controllers-6d6d5bf84f-kwsqq\" (UID: \"6ed339ad-27b3-4a4b-aac6-c54676ad507d\") " pod="calico-system/calico-kube-controllers-6d6d5bf84f-kwsqq" Jul 15 11:32:01.629121 kubelet[1964]: I0715 11:32:01.629022 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c-config\") pod \"goldmane-768f4c5c69-qw2q7\" (UID: \"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c\") " pod="calico-system/goldmane-768f4c5c69-qw2q7" Jul 15 11:32:01.629286 kubelet[1964]: I0715 11:32:01.629037 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/46ad7566-4737-4434-a1b9-fdf79d3f5c45-whisker-backend-key-pair\") pod \"whisker-5fd9ddd4f6-4858p\" (UID: \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\") " pod="calico-system/whisker-5fd9ddd4f6-4858p" Jul 15 11:32:01.629286 kubelet[1964]: I0715 11:32:01.629050 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m2ppg\" (UniqueName: \"kubernetes.io/projected/c7061ccf-2f9c-4d34-9c87-a58c506705c4-kube-api-access-m2ppg\") pod \"calico-apiserver-6ffb65f685-bdghj\" (UID: \"c7061ccf-2f9c-4d34-9c87-a58c506705c4\") " pod="calico-apiserver/calico-apiserver-6ffb65f685-bdghj" Jul 15 11:32:01.629286 kubelet[1964]: I0715 11:32:01.629062 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xq2jz\" (UniqueName: \"kubernetes.io/projected/41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf-kube-api-access-xq2jz\") pod \"coredns-674b8bbfcf-csjbt\" (UID: \"41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf\") " pod="kube-system/coredns-674b8bbfcf-csjbt" Jul 15 11:32:01.629286 kubelet[1964]: I0715 11:32:01.629076 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-57v6b\" (UniqueName: \"kubernetes.io/projected/1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c-kube-api-access-57v6b\") pod \"goldmane-768f4c5c69-qw2q7\" (UID: \"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c\") " pod="calico-system/goldmane-768f4c5c69-qw2q7" Jul 15 11:32:01.629286 kubelet[1964]: I0715 11:32:01.629090 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qv6m8\" (UniqueName: \"kubernetes.io/projected/08dca42d-99cd-4d6c-a05f-812cbc0e64a4-kube-api-access-qv6m8\") pod \"calico-apiserver-6ffb65f685-f9jbv\" (UID: \"08dca42d-99cd-4d6c-a05f-812cbc0e64a4\") " pod="calico-apiserver/calico-apiserver-6ffb65f685-f9jbv" Jul 15 11:32:01.629409 kubelet[1964]: I0715 11:32:01.629103 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c7061ccf-2f9c-4d34-9c87-a58c506705c4-calico-apiserver-certs\") pod \"calico-apiserver-6ffb65f685-bdghj\" (UID: \"c7061ccf-2f9c-4d34-9c87-a58c506705c4\") " pod="calico-apiserver/calico-apiserver-6ffb65f685-bdghj" Jul 15 11:32:01.629409 kubelet[1964]: I0715 11:32:01.629148 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6ed339ad-27b3-4a4b-aac6-c54676ad507d-tigera-ca-bundle\") pod \"calico-kube-controllers-6d6d5bf84f-kwsqq\" (UID: \"6ed339ad-27b3-4a4b-aac6-c54676ad507d\") " pod="calico-system/calico-kube-controllers-6d6d5bf84f-kwsqq" Jul 15 11:32:01.629409 kubelet[1964]: I0715 11:32:01.629165 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-qw2q7\" (UID: \"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c\") " pod="calico-system/goldmane-768f4c5c69-qw2q7" Jul 15 11:32:01.629409 kubelet[1964]: I0715 11:32:01.629181 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf-config-volume\") pod \"coredns-674b8bbfcf-csjbt\" (UID: \"41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf\") " pod="kube-system/coredns-674b8bbfcf-csjbt" Jul 15 11:32:01.629409 kubelet[1964]: I0715 11:32:01.629203 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/46ad7566-4737-4434-a1b9-fdf79d3f5c45-whisker-ca-bundle\") pod \"whisker-5fd9ddd4f6-4858p\" (UID: \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\") " pod="calico-system/whisker-5fd9ddd4f6-4858p" Jul 15 11:32:01.879839 env[1210]: time="2025-07-15T11:32:01.877805745Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6d6d5bf84f-kwsqq,Uid:6ed339ad-27b3-4a4b-aac6-c54676ad507d,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:01.884339 env[1210]: time="2025-07-15T11:32:01.884309484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5fd9ddd4f6-4858p,Uid:46ad7566-4737-4434-a1b9-fdf79d3f5c45,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:01.888928 env[1210]: time="2025-07-15T11:32:01.888883626Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffb65f685-f9jbv,Uid:08dca42d-99cd-4d6c-a05f-812cbc0e64a4,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:32:01.896367 kubelet[1964]: E0715 11:32:01.896317 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:01.896729 env[1210]: time="2025-07-15T11:32:01.896707768Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-csjbt,Uid:41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf,Namespace:kube-system,Attempt:0,}" Jul 15 11:32:01.902013 kubelet[1964]: E0715 11:32:01.901986 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:01.902651 env[1210]: time="2025-07-15T11:32:01.902611299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-v87x5,Uid:c9724c60-b989-4af1-8667-515bc34b0af7,Namespace:kube-system,Attempt:0,}" Jul 15 11:32:01.906082 env[1210]: time="2025-07-15T11:32:01.906049174Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qw2q7,Uid:1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:01.911080 env[1210]: time="2025-07-15T11:32:01.911037714Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffb65f685-bdghj,Uid:c7061ccf-2f9c-4d34-9c87-a58c506705c4,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:32:02.015474 env[1210]: time="2025-07-15T11:32:02.015395878Z" level=error msg="Failed to destroy network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.015800 env[1210]: time="2025-07-15T11:32:02.015773177Z" level=error msg="encountered an error cleaning up failed sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.015836 env[1210]: time="2025-07-15T11:32:02.015821418Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6d6d5bf84f-kwsqq,Uid:6ed339ad-27b3-4a4b-aac6-c54676ad507d,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.016425 kubelet[1964]: E0715 11:32:02.016045 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.016425 kubelet[1964]: E0715 11:32:02.016111 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6d6d5bf84f-kwsqq" Jul 15 11:32:02.016425 kubelet[1964]: E0715 11:32:02.016154 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6d6d5bf84f-kwsqq" Jul 15 11:32:02.016548 kubelet[1964]: E0715 11:32:02.016200 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6d6d5bf84f-kwsqq_calico-system(6ed339ad-27b3-4a4b-aac6-c54676ad507d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6d6d5bf84f-kwsqq_calico-system(6ed339ad-27b3-4a4b-aac6-c54676ad507d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6d6d5bf84f-kwsqq" podUID="6ed339ad-27b3-4a4b-aac6-c54676ad507d" Jul 15 11:32:02.018389 env[1210]: time="2025-07-15T11:32:02.018353739Z" level=error msg="Failed to destroy network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.018984 env[1210]: time="2025-07-15T11:32:02.018942146Z" level=error msg="encountered an error cleaning up failed sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.019230 env[1210]: time="2025-07-15T11:32:02.019193678Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5fd9ddd4f6-4858p,Uid:46ad7566-4737-4434-a1b9-fdf79d3f5c45,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.019408 kubelet[1964]: E0715 11:32:02.019373 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.019449 kubelet[1964]: E0715 11:32:02.019432 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5fd9ddd4f6-4858p" Jul 15 11:32:02.019477 kubelet[1964]: E0715 11:32:02.019453 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5fd9ddd4f6-4858p" Jul 15 11:32:02.019530 kubelet[1964]: E0715 11:32:02.019506 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-5fd9ddd4f6-4858p_calico-system(46ad7566-4737-4434-a1b9-fdf79d3f5c45)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-5fd9ddd4f6-4858p_calico-system(46ad7566-4737-4434-a1b9-fdf79d3f5c45)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5fd9ddd4f6-4858p" podUID="46ad7566-4737-4434-a1b9-fdf79d3f5c45" Jul 15 11:32:02.042261 env[1210]: time="2025-07-15T11:32:02.042202857Z" level=error msg="Failed to destroy network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.042711 env[1210]: time="2025-07-15T11:32:02.042685394Z" level=error msg="encountered an error cleaning up failed sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.042829 env[1210]: time="2025-07-15T11:32:02.042800731Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffb65f685-f9jbv,Uid:08dca42d-99cd-4d6c-a05f-812cbc0e64a4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.043976 kubelet[1964]: E0715 11:32:02.043100 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.043976 kubelet[1964]: E0715 11:32:02.043170 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6ffb65f685-f9jbv" Jul 15 11:32:02.043976 kubelet[1964]: E0715 11:32:02.043198 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6ffb65f685-f9jbv" Jul 15 11:32:02.044093 kubelet[1964]: E0715 11:32:02.043242 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6ffb65f685-f9jbv_calico-apiserver(08dca42d-99cd-4d6c-a05f-812cbc0e64a4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6ffb65f685-f9jbv_calico-apiserver(08dca42d-99cd-4d6c-a05f-812cbc0e64a4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6ffb65f685-f9jbv" podUID="08dca42d-99cd-4d6c-a05f-812cbc0e64a4" Jul 15 11:32:02.056691 env[1210]: time="2025-07-15T11:32:02.056612659Z" level=error msg="Failed to destroy network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.058000 env[1210]: time="2025-07-15T11:32:02.057960753Z" level=error msg="encountered an error cleaning up failed sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.058060 env[1210]: time="2025-07-15T11:32:02.058019684Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-csjbt,Uid:41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.058736 kubelet[1964]: E0715 11:32:02.058272 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.058736 kubelet[1964]: E0715 11:32:02.058315 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-csjbt" Jul 15 11:32:02.058736 kubelet[1964]: E0715 11:32:02.058330 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-csjbt" Jul 15 11:32:02.058843 kubelet[1964]: E0715 11:32:02.058362 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-csjbt_kube-system(41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-csjbt_kube-system(41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-csjbt" podUID="41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf" Jul 15 11:32:02.074532 env[1210]: time="2025-07-15T11:32:02.074485862Z" level=error msg="Failed to destroy network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.075093 env[1210]: time="2025-07-15T11:32:02.075061153Z" level=error msg="encountered an error cleaning up failed sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.075258 env[1210]: time="2025-07-15T11:32:02.075213369Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-v87x5,Uid:c9724c60-b989-4af1-8667-515bc34b0af7,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.075513 kubelet[1964]: E0715 11:32:02.075477 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.075513 kubelet[1964]: E0715 11:32:02.075509 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-v87x5" Jul 15 11:32:02.075651 kubelet[1964]: E0715 11:32:02.075523 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-v87x5" Jul 15 11:32:02.075651 kubelet[1964]: E0715 11:32:02.075569 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-v87x5_kube-system(c9724c60-b989-4af1-8667-515bc34b0af7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-v87x5_kube-system(c9724c60-b989-4af1-8667-515bc34b0af7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-v87x5" podUID="c9724c60-b989-4af1-8667-515bc34b0af7" Jul 15 11:32:02.080791 env[1210]: time="2025-07-15T11:32:02.080745891Z" level=error msg="Failed to destroy network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.081103 env[1210]: time="2025-07-15T11:32:02.081061915Z" level=error msg="encountered an error cleaning up failed sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.081193 env[1210]: time="2025-07-15T11:32:02.081105747Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qw2q7,Uid:1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.081332 kubelet[1964]: E0715 11:32:02.081284 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.081332 kubelet[1964]: E0715 11:32:02.081328 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-qw2q7" Jul 15 11:32:02.081332 kubelet[1964]: E0715 11:32:02.081345 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-qw2q7" Jul 15 11:32:02.081563 kubelet[1964]: E0715 11:32:02.081376 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-qw2q7_calico-system(1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-qw2q7_calico-system(1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-qw2q7" podUID="1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c" Jul 15 11:32:02.085918 env[1210]: time="2025-07-15T11:32:02.085870486Z" level=error msg="Failed to destroy network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.086253 env[1210]: time="2025-07-15T11:32:02.086208019Z" level=error msg="encountered an error cleaning up failed sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.086296 env[1210]: time="2025-07-15T11:32:02.086271169Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffb65f685-bdghj,Uid:c7061ccf-2f9c-4d34-9c87-a58c506705c4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.086428 kubelet[1964]: E0715 11:32:02.086400 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.086477 kubelet[1964]: E0715 11:32:02.086437 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6ffb65f685-bdghj" Jul 15 11:32:02.086477 kubelet[1964]: E0715 11:32:02.086458 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6ffb65f685-bdghj" Jul 15 11:32:02.086575 kubelet[1964]: E0715 11:32:02.086495 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6ffb65f685-bdghj_calico-apiserver(c7061ccf-2f9c-4d34-9c87-a58c506705c4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6ffb65f685-bdghj_calico-apiserver(c7061ccf-2f9c-4d34-9c87-a58c506705c4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6ffb65f685-bdghj" podUID="c7061ccf-2f9c-4d34-9c87-a58c506705c4" Jul 15 11:32:02.519969 kubelet[1964]: I0715 11:32:02.519927 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:02.520686 kubelet[1964]: I0715 11:32:02.520650 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:02.521338 env[1210]: time="2025-07-15T11:32:02.521292659Z" level=info msg="StopPodSandbox for \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\"" Jul 15 11:32:02.521824 env[1210]: time="2025-07-15T11:32:02.521299813Z" level=info msg="StopPodSandbox for \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\"" Jul 15 11:32:02.522183 kubelet[1964]: I0715 11:32:02.522147 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:02.522762 env[1210]: time="2025-07-15T11:32:02.522740271Z" level=info msg="StopPodSandbox for \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\"" Jul 15 11:32:02.523286 kubelet[1964]: I0715 11:32:02.523243 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:02.524079 env[1210]: time="2025-07-15T11:32:02.524056986Z" level=info msg="StopPodSandbox for \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\"" Jul 15 11:32:02.524888 kubelet[1964]: I0715 11:32:02.524860 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:02.525319 env[1210]: time="2025-07-15T11:32:02.525288221Z" level=info msg="StopPodSandbox for \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\"" Jul 15 11:32:02.526798 kubelet[1964]: I0715 11:32:02.526773 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:02.527154 env[1210]: time="2025-07-15T11:32:02.527110678Z" level=info msg="StopPodSandbox for \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\"" Jul 15 11:32:02.528025 kubelet[1964]: I0715 11:32:02.528001 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:02.528452 env[1210]: time="2025-07-15T11:32:02.528425059Z" level=info msg="StopPodSandbox for \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\"" Jul 15 11:32:02.557013 env[1210]: time="2025-07-15T11:32:02.556946531Z" level=error msg="StopPodSandbox for \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\" failed" error="failed to destroy network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.557256 env[1210]: time="2025-07-15T11:32:02.557154933Z" level=error msg="StopPodSandbox for \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\" failed" error="failed to destroy network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.557290 kubelet[1964]: E0715 11:32:02.557188 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:02.557290 kubelet[1964]: E0715 11:32:02.557251 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1"} Jul 15 11:32:02.557358 kubelet[1964]: E0715 11:32:02.557302 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:32:02.557358 kubelet[1964]: E0715 11:32:02.557325 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5fd9ddd4f6-4858p" podUID="46ad7566-4737-4434-a1b9-fdf79d3f5c45" Jul 15 11:32:02.557468 kubelet[1964]: E0715 11:32:02.557436 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:02.557498 kubelet[1964]: E0715 11:32:02.557471 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61"} Jul 15 11:32:02.557498 kubelet[1964]: E0715 11:32:02.557491 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:32:02.557561 kubelet[1964]: E0715 11:32:02.557506 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-csjbt" podUID="41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf" Jul 15 11:32:02.572683 env[1210]: time="2025-07-15T11:32:02.572613837Z" level=error msg="StopPodSandbox for \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\" failed" error="failed to destroy network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.573216 kubelet[1964]: E0715 11:32:02.573159 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:02.573300 kubelet[1964]: E0715 11:32:02.573227 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b"} Jul 15 11:32:02.573300 kubelet[1964]: E0715 11:32:02.573267 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:32:02.573300 kubelet[1964]: E0715 11:32:02.573290 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-qw2q7" podUID="1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c" Jul 15 11:32:02.574388 env[1210]: time="2025-07-15T11:32:02.574360170Z" level=error msg="StopPodSandbox for \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\" failed" error="failed to destroy network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.574639 kubelet[1964]: E0715 11:32:02.574603 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:02.574639 kubelet[1964]: E0715 11:32:02.574635 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c"} Jul 15 11:32:02.574738 kubelet[1964]: E0715 11:32:02.574661 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c7061ccf-2f9c-4d34-9c87-a58c506705c4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:32:02.574738 kubelet[1964]: E0715 11:32:02.574678 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c7061ccf-2f9c-4d34-9c87-a58c506705c4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6ffb65f685-bdghj" podUID="c7061ccf-2f9c-4d34-9c87-a58c506705c4" Jul 15 11:32:02.584324 env[1210]: time="2025-07-15T11:32:02.584268679Z" level=error msg="StopPodSandbox for \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\" failed" error="failed to destroy network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.584595 kubelet[1964]: E0715 11:32:02.584529 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:02.584651 kubelet[1964]: E0715 11:32:02.584604 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853"} Jul 15 11:32:02.584651 kubelet[1964]: E0715 11:32:02.584629 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6ed339ad-27b3-4a4b-aac6-c54676ad507d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:32:02.584732 kubelet[1964]: E0715 11:32:02.584650 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6ed339ad-27b3-4a4b-aac6-c54676ad507d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6d6d5bf84f-kwsqq" podUID="6ed339ad-27b3-4a4b-aac6-c54676ad507d" Jul 15 11:32:02.590962 env[1210]: time="2025-07-15T11:32:02.590901389Z" level=error msg="StopPodSandbox for \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\" failed" error="failed to destroy network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.591147 kubelet[1964]: E0715 11:32:02.591095 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:02.591147 kubelet[1964]: E0715 11:32:02.591141 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04"} Jul 15 11:32:02.591252 kubelet[1964]: E0715 11:32:02.591166 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"08dca42d-99cd-4d6c-a05f-812cbc0e64a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:32:02.591252 kubelet[1964]: E0715 11:32:02.591185 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"08dca42d-99cd-4d6c-a05f-812cbc0e64a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6ffb65f685-f9jbv" podUID="08dca42d-99cd-4d6c-a05f-812cbc0e64a4" Jul 15 11:32:02.594311 env[1210]: time="2025-07-15T11:32:02.594267036Z" level=error msg="StopPodSandbox for \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\" failed" error="failed to destroy network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:02.594413 kubelet[1964]: E0715 11:32:02.594383 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:02.594413 kubelet[1964]: E0715 11:32:02.594412 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf"} Jul 15 11:32:02.594493 kubelet[1964]: E0715 11:32:02.594433 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c9724c60-b989-4af1-8667-515bc34b0af7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:32:02.594493 kubelet[1964]: E0715 11:32:02.594454 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c9724c60-b989-4af1-8667-515bc34b0af7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-v87x5" podUID="c9724c60-b989-4af1-8667-515bc34b0af7" Jul 15 11:32:03.401177 systemd[1]: Created slice kubepods-besteffort-podd2f1d298_58ec_4a3a_b674_a51540fedfbb.slice. Jul 15 11:32:03.406830 env[1210]: time="2025-07-15T11:32:03.406790029Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-8kc9f,Uid:d2f1d298-58ec-4a3a-b674-a51540fedfbb,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:04.508025 env[1210]: time="2025-07-15T11:32:04.507947248Z" level=error msg="Failed to destroy network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:04.511585 env[1210]: time="2025-07-15T11:32:04.508410288Z" level=error msg="encountered an error cleaning up failed sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:04.511585 env[1210]: time="2025-07-15T11:32:04.508460863Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-8kc9f,Uid:d2f1d298-58ec-4a3a-b674-a51540fedfbb,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:04.510475 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672-shm.mount: Deactivated successfully. Jul 15 11:32:04.511831 kubelet[1964]: E0715 11:32:04.508649 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:04.511831 kubelet[1964]: E0715 11:32:04.508704 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-8kc9f" Jul 15 11:32:04.511831 kubelet[1964]: E0715 11:32:04.508725 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-8kc9f" Jul 15 11:32:04.512085 kubelet[1964]: E0715 11:32:04.508771 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-8kc9f_calico-system(d2f1d298-58ec-4a3a-b674-a51540fedfbb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-8kc9f_calico-system(d2f1d298-58ec-4a3a-b674-a51540fedfbb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-8kc9f" podUID="d2f1d298-58ec-4a3a-b674-a51540fedfbb" Jul 15 11:32:04.531090 kubelet[1964]: I0715 11:32:04.531056 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:04.531627 env[1210]: time="2025-07-15T11:32:04.531575796Z" level=info msg="StopPodSandbox for \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\"" Jul 15 11:32:04.553909 env[1210]: time="2025-07-15T11:32:04.553835551Z" level=error msg="StopPodSandbox for \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\" failed" error="failed to destroy network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:32:04.554119 kubelet[1964]: E0715 11:32:04.554081 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:04.554209 kubelet[1964]: E0715 11:32:04.554140 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672"} Jul 15 11:32:04.554209 kubelet[1964]: E0715 11:32:04.554172 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d2f1d298-58ec-4a3a-b674-a51540fedfbb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:32:04.554209 kubelet[1964]: E0715 11:32:04.554200 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d2f1d298-58ec-4a3a-b674-a51540fedfbb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-8kc9f" podUID="d2f1d298-58ec-4a3a-b674-a51540fedfbb" Jul 15 11:32:05.663671 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 15 11:32:05.663812 kernel: audit: type=1130 audit(1752579125.657:999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.76:22-10.0.0.1:43132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:05.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.76:22-10.0.0.1:43132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:05.658638 systemd[1]: Started sshd@7-10.0.0.76:22-10.0.0.1:43132.service. Jul 15 11:32:05.699000 audit[3175]: USER_ACCT pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.704442 sshd[3175]: Accepted publickey for core from 10.0.0.1 port 43132 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:05.703000 audit[3175]: CRED_ACQ pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.704785 sshd[3175]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:05.705204 kernel: audit: type=1101 audit(1752579125.699:1000): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.705256 kernel: audit: type=1103 audit(1752579125.703:1001): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.710053 kernel: audit: type=1006 audit(1752579125.703:1002): pid=3175 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 15 11:32:05.710099 kernel: audit: type=1300 audit(1752579125.703:1002): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1812c7c0 a2=3 a3=0 items=0 ppid=1 pid=3175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:05.703000 audit[3175]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1812c7c0 a2=3 a3=0 items=0 ppid=1 pid=3175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:05.703000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:05.715047 kernel: audit: type=1327 audit(1752579125.703:1002): proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:05.717645 systemd-logind[1201]: New session 8 of user core. Jul 15 11:32:05.718548 systemd[1]: Started session-8.scope. Jul 15 11:32:05.721000 audit[3175]: USER_START pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.724000 audit[3177]: CRED_ACQ pid=3177 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.730413 kernel: audit: type=1105 audit(1752579125.721:1003): pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.730462 kernel: audit: type=1103 audit(1752579125.724:1004): pid=3177 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.843779 sshd[3175]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:05.843000 audit[3175]: USER_END pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.846416 systemd[1]: sshd@7-10.0.0.76:22-10.0.0.1:43132.service: Deactivated successfully. Jul 15 11:32:05.847096 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:32:05.843000 audit[3175]: CRED_DISP pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.852148 kernel: audit: type=1106 audit(1752579125.843:1005): pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.852208 kernel: audit: type=1104 audit(1752579125.843:1006): pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:05.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.76:22-10.0.0.1:43132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:05.852611 systemd-logind[1201]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:32:05.853468 systemd-logind[1201]: Removed session 8. Jul 15 11:32:08.126076 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4203087050.mount: Deactivated successfully. Jul 15 11:32:08.794893 env[1210]: time="2025-07-15T11:32:08.794831878Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:08.797223 env[1210]: time="2025-07-15T11:32:08.797172143Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:08.798833 env[1210]: time="2025-07-15T11:32:08.798802687Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:08.800435 env[1210]: time="2025-07-15T11:32:08.800411157Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:08.800756 env[1210]: time="2025-07-15T11:32:08.800732692Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 15 11:32:08.810576 env[1210]: time="2025-07-15T11:32:08.810535114Z" level=info msg="CreateContainer within sandbox \"a1b74b7e28b4590c641c846d00ab45ba3bd2df100c72be75ebf23e23d50b6dc0\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:32:08.827444 env[1210]: time="2025-07-15T11:32:08.827400603Z" level=info msg="CreateContainer within sandbox \"a1b74b7e28b4590c641c846d00ab45ba3bd2df100c72be75ebf23e23d50b6dc0\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"8ae1b46fddf21be1f7d84c5de86d528551246beb1c5250fac824504ae1e78317\"" Jul 15 11:32:08.828025 env[1210]: time="2025-07-15T11:32:08.827974220Z" level=info msg="StartContainer for \"8ae1b46fddf21be1f7d84c5de86d528551246beb1c5250fac824504ae1e78317\"" Jul 15 11:32:08.844977 systemd[1]: Started cri-containerd-8ae1b46fddf21be1f7d84c5de86d528551246beb1c5250fac824504ae1e78317.scope. Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb3c00b8178 items=0 ppid=2478 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:08.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861653162343666646466323162653166376438346335646538366435 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit: BPF prog-id=133 op=LOAD Jul 15 11:32:08.863000 audit[3209]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000246b88 items=0 ppid=2478 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:08.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861653162343666646466323162653166376438346335646538366435 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit: BPF prog-id=134 op=LOAD Jul 15 11:32:08.863000 audit[3209]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000246bd8 items=0 ppid=2478 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:08.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861653162343666646466323162653166376438346335646538366435 Jul 15 11:32:08.863000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:32:08.863000 audit: BPF prog-id=133 op=UNLOAD Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:08.863000 audit: BPF prog-id=135 op=LOAD Jul 15 11:32:08.863000 audit[3209]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000246c68 items=0 ppid=2478 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:08.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861653162343666646466323162653166376438346335646538366435 Jul 15 11:32:08.899247 env[1210]: time="2025-07-15T11:32:08.899172975Z" level=info msg="StartContainer for \"8ae1b46fddf21be1f7d84c5de86d528551246beb1c5250fac824504ae1e78317\" returns successfully" Jul 15 11:32:08.963036 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:32:08.963208 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:32:09.044241 env[1210]: time="2025-07-15T11:32:09.044191317Z" level=info msg="StopPodSandbox for \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\"" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.101 [INFO][3268] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.102 [INFO][3268] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" iface="eth0" netns="/var/run/netns/cni-0adf6466-a0e6-a287-8cf4-a161c069e589" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.102 [INFO][3268] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" iface="eth0" netns="/var/run/netns/cni-0adf6466-a0e6-a287-8cf4-a161c069e589" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.102 [INFO][3268] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" iface="eth0" netns="/var/run/netns/cni-0adf6466-a0e6-a287-8cf4-a161c069e589" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.102 [INFO][3268] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.102 [INFO][3268] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.153 [INFO][3277] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" HandleID="k8s-pod-network.1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Workload="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.154 [INFO][3277] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.154 [INFO][3277] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.163 [WARNING][3277] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" HandleID="k8s-pod-network.1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Workload="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.163 [INFO][3277] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" HandleID="k8s-pod-network.1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Workload="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.165 [INFO][3277] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:09.169709 env[1210]: 2025-07-15 11:32:09.167 [INFO][3268] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:09.170211 env[1210]: time="2025-07-15T11:32:09.169794762Z" level=info msg="TearDown network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\" successfully" Jul 15 11:32:09.170211 env[1210]: time="2025-07-15T11:32:09.169832704Z" level=info msg="StopPodSandbox for \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\" returns successfully" Jul 15 11:32:09.171865 systemd[1]: run-netns-cni\x2d0adf6466\x2da0e6\x2da287\x2d8cf4\x2da161c069e589.mount: Deactivated successfully. Jul 15 11:32:09.282046 kubelet[1964]: I0715 11:32:09.281992 1964 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/46ad7566-4737-4434-a1b9-fdf79d3f5c45-whisker-ca-bundle\") pod \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\" (UID: \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\") " Jul 15 11:32:09.282046 kubelet[1964]: I0715 11:32:09.282027 1964 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-mqkmm\" (UniqueName: \"kubernetes.io/projected/46ad7566-4737-4434-a1b9-fdf79d3f5c45-kube-api-access-mqkmm\") pod \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\" (UID: \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\") " Jul 15 11:32:09.282046 kubelet[1964]: I0715 11:32:09.282057 1964 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/46ad7566-4737-4434-a1b9-fdf79d3f5c45-whisker-backend-key-pair\") pod \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\" (UID: \"46ad7566-4737-4434-a1b9-fdf79d3f5c45\") " Jul 15 11:32:09.282577 kubelet[1964]: I0715 11:32:09.282526 1964 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/46ad7566-4737-4434-a1b9-fdf79d3f5c45-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "46ad7566-4737-4434-a1b9-fdf79d3f5c45" (UID: "46ad7566-4737-4434-a1b9-fdf79d3f5c45"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 15 11:32:09.285624 kubelet[1964]: I0715 11:32:09.285581 1964 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/46ad7566-4737-4434-a1b9-fdf79d3f5c45-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "46ad7566-4737-4434-a1b9-fdf79d3f5c45" (UID: "46ad7566-4737-4434-a1b9-fdf79d3f5c45"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 15 11:32:09.286260 kubelet[1964]: I0715 11:32:09.286226 1964 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/46ad7566-4737-4434-a1b9-fdf79d3f5c45-kube-api-access-mqkmm" (OuterVolumeSpecName: "kube-api-access-mqkmm") pod "46ad7566-4737-4434-a1b9-fdf79d3f5c45" (UID: "46ad7566-4737-4434-a1b9-fdf79d3f5c45"). InnerVolumeSpecName "kube-api-access-mqkmm". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 15 11:32:09.286954 systemd[1]: var-lib-kubelet-pods-46ad7566\x2d4737\x2d4434\x2da1b9\x2dfdf79d3f5c45-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmqkmm.mount: Deactivated successfully. Jul 15 11:32:09.287062 systemd[1]: var-lib-kubelet-pods-46ad7566\x2d4737\x2d4434\x2da1b9\x2dfdf79d3f5c45-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:32:09.382504 kubelet[1964]: I0715 11:32:09.382466 1964 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/46ad7566-4737-4434-a1b9-fdf79d3f5c45-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:32:09.382504 kubelet[1964]: I0715 11:32:09.382489 1964 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-mqkmm\" (UniqueName: \"kubernetes.io/projected/46ad7566-4737-4434-a1b9-fdf79d3f5c45-kube-api-access-mqkmm\") on node \"localhost\" DevicePath \"\"" Jul 15 11:32:09.382504 kubelet[1964]: I0715 11:32:09.382497 1964 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/46ad7566-4737-4434-a1b9-fdf79d3f5c45-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:32:09.545420 systemd[1]: Removed slice kubepods-besteffort-pod46ad7566_4737_4434_a1b9_fdf79d3f5c45.slice. Jul 15 11:32:09.557189 kubelet[1964]: I0715 11:32:09.556794 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-vjqgd" podStartSLOduration=1.7883133180000002 podStartE2EDuration="20.556777203s" podCreationTimestamp="2025-07-15 11:31:49 +0000 UTC" firstStartedPulling="2025-07-15 11:31:50.03293141 +0000 UTC m=+17.727219257" lastFinishedPulling="2025-07-15 11:32:08.801395306 +0000 UTC m=+36.495683142" observedRunningTime="2025-07-15 11:32:09.556231168 +0000 UTC m=+37.250519014" watchObservedRunningTime="2025-07-15 11:32:09.556777203 +0000 UTC m=+37.251065049" Jul 15 11:32:09.618688 systemd[1]: Created slice kubepods-besteffort-pod8135c7bf_a03f_4bba_8725_3c94cefc2eb4.slice. Jul 15 11:32:09.685635 kubelet[1964]: I0715 11:32:09.685587 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8135c7bf-a03f-4bba-8725-3c94cefc2eb4-whisker-ca-bundle\") pod \"whisker-5c9859466d-6fljn\" (UID: \"8135c7bf-a03f-4bba-8725-3c94cefc2eb4\") " pod="calico-system/whisker-5c9859466d-6fljn" Jul 15 11:32:09.685635 kubelet[1964]: I0715 11:32:09.685639 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hhzlq\" (UniqueName: \"kubernetes.io/projected/8135c7bf-a03f-4bba-8725-3c94cefc2eb4-kube-api-access-hhzlq\") pod \"whisker-5c9859466d-6fljn\" (UID: \"8135c7bf-a03f-4bba-8725-3c94cefc2eb4\") " pod="calico-system/whisker-5c9859466d-6fljn" Jul 15 11:32:09.685815 kubelet[1964]: I0715 11:32:09.685661 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/8135c7bf-a03f-4bba-8725-3c94cefc2eb4-whisker-backend-key-pair\") pod \"whisker-5c9859466d-6fljn\" (UID: \"8135c7bf-a03f-4bba-8725-3c94cefc2eb4\") " pod="calico-system/whisker-5c9859466d-6fljn" Jul 15 11:32:09.921375 env[1210]: time="2025-07-15T11:32:09.921260047Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c9859466d-6fljn,Uid:8135c7bf-a03f-4bba-8725-3c94cefc2eb4,Namespace:calico-system,Attempt:0,}" Jul 15 11:32:10.022881 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:32:10.023007 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0801c6ae690: link becomes ready Jul 15 11:32:10.023358 systemd-networkd[1032]: cali0801c6ae690: Link UP Jul 15 11:32:10.023841 systemd-networkd[1032]: cali0801c6ae690: Gained carrier Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.951 [INFO][3300] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.961 [INFO][3300] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--5c9859466d--6fljn-eth0 whisker-5c9859466d- calico-system 8135c7bf-a03f-4bba-8725-3c94cefc2eb4 962 0 2025-07-15 11:32:09 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5c9859466d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-5c9859466d-6fljn eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali0801c6ae690 [] [] }} ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Namespace="calico-system" Pod="whisker-5c9859466d-6fljn" WorkloadEndpoint="localhost-k8s-whisker--5c9859466d--6fljn-" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.961 [INFO][3300] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Namespace="calico-system" Pod="whisker-5c9859466d-6fljn" WorkloadEndpoint="localhost-k8s-whisker--5c9859466d--6fljn-eth0" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.982 [INFO][3313] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" HandleID="k8s-pod-network.f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Workload="localhost-k8s-whisker--5c9859466d--6fljn-eth0" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.982 [INFO][3313] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" HandleID="k8s-pod-network.f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Workload="localhost-k8s-whisker--5c9859466d--6fljn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004f640), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-5c9859466d-6fljn", "timestamp":"2025-07-15 11:32:09.98270663 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.982 [INFO][3313] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.982 [INFO][3313] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.982 [INFO][3313] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.990 [INFO][3313] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" host="localhost" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.995 [INFO][3313] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:09.999 [INFO][3313] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:10.000 [INFO][3313] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:10.002 [INFO][3313] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:10.002 [INFO][3313] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" host="localhost" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:10.003 [INFO][3313] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:10.006 [INFO][3313] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" host="localhost" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:10.010 [INFO][3313] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" host="localhost" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:10.010 [INFO][3313] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" host="localhost" Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:10.010 [INFO][3313] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:10.032935 env[1210]: 2025-07-15 11:32:10.010 [INFO][3313] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" HandleID="k8s-pod-network.f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Workload="localhost-k8s-whisker--5c9859466d--6fljn-eth0" Jul 15 11:32:10.033608 env[1210]: 2025-07-15 11:32:10.012 [INFO][3300] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Namespace="calico-system" Pod="whisker-5c9859466d-6fljn" WorkloadEndpoint="localhost-k8s-whisker--5c9859466d--6fljn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5c9859466d--6fljn-eth0", GenerateName:"whisker-5c9859466d-", Namespace:"calico-system", SelfLink:"", UID:"8135c7bf-a03f-4bba-8725-3c94cefc2eb4", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5c9859466d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-5c9859466d-6fljn", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali0801c6ae690", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:10.033608 env[1210]: 2025-07-15 11:32:10.012 [INFO][3300] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Namespace="calico-system" Pod="whisker-5c9859466d-6fljn" WorkloadEndpoint="localhost-k8s-whisker--5c9859466d--6fljn-eth0" Jul 15 11:32:10.033608 env[1210]: 2025-07-15 11:32:10.012 [INFO][3300] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0801c6ae690 ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Namespace="calico-system" Pod="whisker-5c9859466d-6fljn" WorkloadEndpoint="localhost-k8s-whisker--5c9859466d--6fljn-eth0" Jul 15 11:32:10.033608 env[1210]: 2025-07-15 11:32:10.023 [INFO][3300] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Namespace="calico-system" Pod="whisker-5c9859466d-6fljn" WorkloadEndpoint="localhost-k8s-whisker--5c9859466d--6fljn-eth0" Jul 15 11:32:10.033608 env[1210]: 2025-07-15 11:32:10.023 [INFO][3300] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Namespace="calico-system" Pod="whisker-5c9859466d-6fljn" WorkloadEndpoint="localhost-k8s-whisker--5c9859466d--6fljn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5c9859466d--6fljn-eth0", GenerateName:"whisker-5c9859466d-", Namespace:"calico-system", SelfLink:"", UID:"8135c7bf-a03f-4bba-8725-3c94cefc2eb4", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 32, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5c9859466d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec", Pod:"whisker-5c9859466d-6fljn", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali0801c6ae690", MAC:"f2:b6:6b:77:dd:b9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:10.033608 env[1210]: 2025-07-15 11:32:10.030 [INFO][3300] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec" Namespace="calico-system" Pod="whisker-5c9859466d-6fljn" WorkloadEndpoint="localhost-k8s-whisker--5c9859466d--6fljn-eth0" Jul 15 11:32:10.040737 env[1210]: time="2025-07-15T11:32:10.040664903Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:10.040737 env[1210]: time="2025-07-15T11:32:10.040711861Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:10.040862 env[1210]: time="2025-07-15T11:32:10.040732199Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:10.041090 env[1210]: time="2025-07-15T11:32:10.041010472Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec pid=3336 runtime=io.containerd.runc.v2 Jul 15 11:32:10.050882 systemd[1]: Started cri-containerd-f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec.scope. Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit: BPF prog-id=136 op=LOAD Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3336 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633363661656165393839366631343135653131386665643236363433 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3336 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633363661656165393839366631343135653131386665643236363433 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit: BPF prog-id=137 op=LOAD Jul 15 11:32:10.060000 audit[3346]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000e1ce0 items=0 ppid=3336 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633363661656165393839366631343135653131386665643236363433 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.060000 audit: BPF prog-id=138 op=LOAD Jul 15 11:32:10.060000 audit[3346]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000e1d28 items=0 ppid=3336 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633363661656165393839366631343135653131386665643236363433 Jul 15 11:32:10.061000 audit: BPF prog-id=138 op=UNLOAD Jul 15 11:32:10.061000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { perfmon } for pid=3346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit[3346]: AVC avc: denied { bpf } for pid=3346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.061000 audit: BPF prog-id=139 op=LOAD Jul 15 11:32:10.061000 audit[3346]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000362138 items=0 ppid=3336 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633363661656165393839366631343135653131386665643236363433 Jul 15 11:32:10.062974 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:32:10.081753 env[1210]: time="2025-07-15T11:32:10.081701555Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c9859466d-6fljn,Uid:8135c7bf-a03f-4bba-8725-3c94cefc2eb4,Namespace:calico-system,Attempt:0,} returns sandbox id \"f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec\"" Jul 15 11:32:10.083160 env[1210]: time="2025-07-15T11:32:10.083140367Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:32:10.207000 audit[3422]: AVC avc: denied { write } for pid=3422 comm="tee" name="fd" dev="proc" ino=25926 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:32:10.207000 audit[3422]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcf4a877ed a2=241 a3=1b6 items=1 ppid=3383 pid=3422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.207000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:32:10.207000 audit: PATH item=0 name="/dev/fd/63" inode=25916 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:10.207000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:32:10.210000 audit[3433]: AVC avc: denied { write } for pid=3433 comm="tee" name="fd" dev="proc" ino=24339 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:32:10.210000 audit[3433]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcc9b367ef a2=241 a3=1b6 items=1 ppid=3382 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.210000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:32:10.210000 audit: PATH item=0 name="/dev/fd/63" inode=25077 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:10.210000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:32:10.211000 audit[3440]: AVC avc: denied { write } for pid=3440 comm="tee" name="fd" dev="proc" ino=24343 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:32:10.211000 audit[3440]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe0943d7ed a2=241 a3=1b6 items=1 ppid=3376 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.211000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:32:10.211000 audit: PATH item=0 name="/dev/fd/63" inode=25923 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:10.211000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:32:10.220000 audit[3438]: AVC avc: denied { write } for pid=3438 comm="tee" name="fd" dev="proc" ino=25082 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:32:10.220000 audit[3438]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc87f7c7dd a2=241 a3=1b6 items=1 ppid=3388 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.220000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:32:10.220000 audit: PATH item=0 name="/dev/fd/63" inode=24333 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:10.220000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:32:10.221000 audit[3430]: AVC avc: denied { write } for pid=3430 comm="tee" name="fd" dev="proc" ino=25086 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:32:10.221000 audit[3430]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff5dfa07ee a2=241 a3=1b6 items=1 ppid=3377 pid=3430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.221000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:32:10.221000 audit: PATH item=0 name="/dev/fd/63" inode=24330 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:10.221000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:32:10.222000 audit[3424]: AVC avc: denied { write } for pid=3424 comm="tee" name="fd" dev="proc" ino=23455 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:32:10.222000 audit[3424]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe6e20d7ed a2=241 a3=1b6 items=1 ppid=3384 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.222000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:32:10.222000 audit: PATH item=0 name="/dev/fd/63" inode=24327 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:10.222000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:32:10.238000 audit[3445]: AVC avc: denied { write } for pid=3445 comm="tee" name="fd" dev="proc" ino=24348 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:32:10.238000 audit[3445]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff5179b7de a2=241 a3=1b6 items=1 ppid=3393 pid=3445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.238000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:32:10.238000 audit: PATH item=0 name="/dev/fd/63" inode=24336 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:32:10.238000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit: BPF prog-id=140 op=LOAD Jul 15 11:32:10.365000 audit[3495]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc035efff0 a2=98 a3=1fffffffffffffff items=0 ppid=3387 pid=3495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.365000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:32:10.365000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit: BPF prog-id=141 op=LOAD Jul 15 11:32:10.365000 audit[3495]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc035efed0 a2=94 a3=3 items=0 ppid=3387 pid=3495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.365000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:32:10.365000 audit: BPF prog-id=141 op=UNLOAD Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit: BPF prog-id=142 op=LOAD Jul 15 11:32:10.365000 audit[3495]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc035eff10 a2=94 a3=7ffc035f00f0 items=0 ppid=3387 pid=3495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.365000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:32:10.365000 audit: BPF prog-id=142 op=UNLOAD Jul 15 11:32:10.365000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.365000 audit[3495]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffc035effe0 a2=50 a3=a000000085 items=0 ppid=3387 pid=3495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.365000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit: BPF prog-id=143 op=LOAD Jul 15 11:32:10.367000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd492d5260 a2=98 a3=3 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.367000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.367000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit: BPF prog-id=144 op=LOAD Jul 15 11:32:10.367000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd492d5050 a2=94 a3=54428f items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.367000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.367000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.367000 audit: BPF prog-id=145 op=LOAD Jul 15 11:32:10.367000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd492d5080 a2=94 a3=2 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.367000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.368000 audit: BPF prog-id=145 op=UNLOAD Jul 15 11:32:10.398501 kubelet[1964]: I0715 11:32:10.398458 1964 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="46ad7566-4737-4434-a1b9-fdf79d3f5c45" path="/var/lib/kubelet/pods/46ad7566-4737-4434-a1b9-fdf79d3f5c45/volumes" Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit: BPF prog-id=146 op=LOAD Jul 15 11:32:10.473000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd492d4f40 a2=94 a3=1 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.473000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.473000 audit: BPF prog-id=146 op=UNLOAD Jul 15 11:32:10.473000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.473000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd492d5010 a2=50 a3=7ffd492d50f0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.473000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd492d4f50 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd492d4f80 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd492d4e90 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd492d4fa0 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd492d4f80 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd492d4f70 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd492d4fa0 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd492d4f80 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd492d4fa0 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd492d4f70 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.481000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.481000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd492d4fe0 a2=28 a3=0 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd492d4d90 a2=50 a3=1 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.482000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit: BPF prog-id=147 op=LOAD Jul 15 11:32:10.482000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd492d4d90 a2=94 a3=5 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.482000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.482000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd492d4e40 a2=50 a3=1 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.482000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd492d4f60 a2=4 a3=38 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.482000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { confidentiality } for pid=3496 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:32:10.482000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd492d4fb0 a2=94 a3=6 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.482000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { confidentiality } for pid=3496 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:32:10.482000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd492d4760 a2=94 a3=88 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.482000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.482000 audit[3496]: AVC avc: denied { confidentiality } for pid=3496 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:32:10.482000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd492d4760 a2=94 a3=88 items=0 ppid=3387 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.482000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit: BPF prog-id=148 op=LOAD Jul 15 11:32:10.489000 audit[3499]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd0b33aca0 a2=98 a3=1999999999999999 items=0 ppid=3387 pid=3499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.489000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:32:10.489000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit: BPF prog-id=149 op=LOAD Jul 15 11:32:10.489000 audit[3499]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd0b33ab80 a2=94 a3=ffff items=0 ppid=3387 pid=3499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.489000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:32:10.489000 audit: BPF prog-id=149 op=UNLOAD Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { perfmon } for pid=3499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit[3499]: AVC avc: denied { bpf } for pid=3499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.489000 audit: BPF prog-id=150 op=LOAD Jul 15 11:32:10.489000 audit[3499]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd0b33abc0 a2=94 a3=7ffd0b33ada0 items=0 ppid=3387 pid=3499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.489000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:32:10.489000 audit: BPF prog-id=150 op=UNLOAD Jul 15 11:32:10.536496 systemd-networkd[1032]: vxlan.calico: Link UP Jul 15 11:32:10.536505 systemd-networkd[1032]: vxlan.calico: Gained carrier Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit: BPF prog-id=151 op=LOAD Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffccd910730 a2=98 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit: BPF prog-id=152 op=LOAD Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffccd910540 a2=94 a3=54428f items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit: BPF prog-id=153 op=LOAD Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffccd910570 a2=94 a3=2 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit: BPF prog-id=153 op=UNLOAD Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffccd910440 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccd910470 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccd910380 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffccd910490 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffccd910470 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffccd910460 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffccd910490 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccd910470 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccd910490 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccd910460 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffccd9104d0 a2=28 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.546000 audit: BPF prog-id=154 op=LOAD Jul 15 11:32:10.546000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffccd910340 a2=94 a3=0 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.547000 audit: BPF prog-id=154 op=UNLOAD Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffccd910330 a2=50 a3=2800 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffccd910330 a2=50 a3=2800 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit: BPF prog-id=155 op=LOAD Jul 15 11:32:10.547000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffccd90fb50 a2=94 a3=2 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.547000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.547000 audit: BPF prog-id=156 op=LOAD Jul 15 11:32:10.547000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffccd90fc50 a2=94 a3=30 items=0 ppid=3387 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit: BPF prog-id=157 op=LOAD Jul 15 11:32:10.554000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc21f808f0 a2=98 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.554000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.554000 audit: BPF prog-id=157 op=UNLOAD Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit: BPF prog-id=158 op=LOAD Jul 15 11:32:10.554000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc21f806e0 a2=94 a3=54428f items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.554000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.554000 audit: BPF prog-id=158 op=UNLOAD Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.554000 audit: BPF prog-id=159 op=LOAD Jul 15 11:32:10.554000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc21f80710 a2=94 a3=2 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.554000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.554000 audit: BPF prog-id=159 op=UNLOAD Jul 15 11:32:10.659000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.661280 kernel: kauditd_printk_skb: 523 callbacks suppressed Jul 15 11:32:10.661344 kernel: audit: type=1400 audit(1752579130.659:1110): avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.659000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.666735 kernel: audit: type=1400 audit(1752579130.659:1110): avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.666769 kernel: audit: type=1400 audit(1752579130.659:1110): avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.659000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.659000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.672355 kernel: audit: type=1400 audit(1752579130.659:1110): avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.672389 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 15 11:32:10.672404 kernel: audit: type=1400 audit(1752579130.659:1110): avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.659000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.673173 kernel: audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 Jul 15 11:32:10.675938 kernel: audit: type=1400 audit(1752579130.659:1110): avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.675972 kernel: audit: type=1400 audit(1752579130.659:1110): avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.675994 kernel: audit: type=1400 audit(1752579130.659:1110): avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.659000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.659000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.659000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.659000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.659000 audit: BPF prog-id=160 op=LOAD Jul 15 11:32:10.659000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc21f805d0 a2=94 a3=1 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.659000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.662000 audit: BPF prog-id=160 op=UNLOAD Jul 15 11:32:10.662000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.662000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc21f806a0 a2=50 a3=7ffc21f80780 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.662000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc21f805e0 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc21f80610 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc21f80520 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc21f80630 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc21f80610 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc21f80600 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc21f80630 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc21f80610 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc21f80630 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc21f80600 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.670000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.670000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc21f80670 a2=28 a3=0 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.671000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.671000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc21f80420 a2=50 a3=1 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.671000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.671000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.671000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.671000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.671000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.671000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.671000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.671000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.671000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.671000 audit: BPF prog-id=161 op=LOAD Jul 15 11:32:10.671000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc21f80420 a2=94 a3=5 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.671000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.684000 audit: BPF prog-id=161 op=UNLOAD Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc21f804d0 a2=50 a3=1 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.684000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc21f805f0 a2=4 a3=38 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.684000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { confidentiality } for pid=3537 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:32:10.684000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc21f80640 a2=94 a3=6 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.684000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { confidentiality } for pid=3537 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:32:10.684000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc21f7fdf0 a2=94 a3=88 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.684000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { perfmon } for pid=3537 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.684000 audit[3537]: AVC avc: denied { confidentiality } for pid=3537 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:32:10.684000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc21f7fdf0 a2=94 a3=88 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.684000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.685000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.685000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc21f81820 a2=10 a3=208 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.685000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.685000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.685000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc21f816c0 a2=10 a3=3 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.685000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.685000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.685000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc21f81660 a2=10 a3=3 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.685000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.685000 audit[3537]: AVC avc: denied { bpf } for pid=3537 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:10.685000 audit[3537]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc21f81660 a2=10 a3=7 items=0 ppid=3387 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.685000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:32:10.692000 audit: BPF prog-id=156 op=UNLOAD Jul 15 11:32:10.730000 audit[3580]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3580 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:10.730000 audit[3580]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff49410d90 a2=0 a3=7fff49410d7c items=0 ppid=3387 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.730000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:10.736000 audit[3578]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3578 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:10.736000 audit[3578]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffc57ede780 a2=0 a3=7ffc57ede76c items=0 ppid=3387 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.736000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:10.741000 audit[3579]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3579 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:10.741000 audit[3579]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7fff43739110 a2=0 a3=7fff437390fc items=0 ppid=3387 pid=3579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.741000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:10.744000 audit[3583]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3583 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:10.744000 audit[3583]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffc8ec60fe0 a2=0 a3=7ffc8ec60fcc items=0 ppid=3387 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.744000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:10.847732 systemd[1]: Started sshd@8-10.0.0.76:22-10.0.0.1:54318.service. Jul 15 11:32:10.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.76:22-10.0.0.1:54318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:10.886000 audit[3593]: USER_ACCT pid=3593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.888286 sshd[3593]: Accepted publickey for core from 10.0.0.1 port 54318 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:10.887000 audit[3593]: CRED_ACQ pid=3593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.887000 audit[3593]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde9385020 a2=3 a3=0 items=0 ppid=1 pid=3593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:10.887000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:10.888958 sshd[3593]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:10.892235 systemd-logind[1201]: New session 9 of user core. Jul 15 11:32:10.893049 systemd[1]: Started session-9.scope. Jul 15 11:32:10.895000 audit[3593]: USER_START pid=3593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:10.897000 audit[3595]: CRED_ACQ pid=3595 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:11.004957 sshd[3593]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:11.004000 audit[3593]: USER_END pid=3593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:11.004000 audit[3593]: CRED_DISP pid=3593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:11.007135 systemd[1]: sshd@8-10.0.0.76:22-10.0.0.1:54318.service: Deactivated successfully. Jul 15 11:32:11.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.76:22-10.0.0.1:54318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:11.007978 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:32:11.008584 systemd-logind[1201]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:32:11.009403 systemd-logind[1201]: Removed session 9. Jul 15 11:32:11.424533 env[1210]: time="2025-07-15T11:32:11.424431757Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:11.426291 env[1210]: time="2025-07-15T11:32:11.426266342Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:11.427742 env[1210]: time="2025-07-15T11:32:11.427709973Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:11.429171 env[1210]: time="2025-07-15T11:32:11.429150759Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:11.429792 env[1210]: time="2025-07-15T11:32:11.429762027Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 15 11:32:11.435795 env[1210]: time="2025-07-15T11:32:11.435765138Z" level=info msg="CreateContainer within sandbox \"f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:32:11.438242 systemd-networkd[1032]: cali0801c6ae690: Gained IPv6LL Jul 15 11:32:11.453138 env[1210]: time="2025-07-15T11:32:11.453078657Z" level=info msg="CreateContainer within sandbox \"f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"fc11ffc22a1be49921fcfd691148e61f63b1ed2a7e6823d7c6fd6fef0287b028\"" Jul 15 11:32:11.453594 env[1210]: time="2025-07-15T11:32:11.453572304Z" level=info msg="StartContainer for \"fc11ffc22a1be49921fcfd691148e61f63b1ed2a7e6823d7c6fd6fef0287b028\"" Jul 15 11:32:11.473167 systemd[1]: Started cri-containerd-fc11ffc22a1be49921fcfd691148e61f63b1ed2a7e6823d7c6fd6fef0287b028.scope. Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit: BPF prog-id=162 op=LOAD Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3336 pid=3616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:11.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313166666332326131626534393932316663666436393131343865 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3336 pid=3616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:11.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313166666332326131626534393932316663666436393131343865 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.481000 audit: BPF prog-id=163 op=LOAD Jul 15 11:32:11.481000 audit[3616]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00024dc20 items=0 ppid=3336 pid=3616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:11.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313166666332326131626534393932316663666436393131343865 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit: BPF prog-id=164 op=LOAD Jul 15 11:32:11.482000 audit[3616]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00024dc68 items=0 ppid=3336 pid=3616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:11.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313166666332326131626534393932316663666436393131343865 Jul 15 11:32:11.482000 audit: BPF prog-id=164 op=UNLOAD Jul 15 11:32:11.482000 audit: BPF prog-id=163 op=UNLOAD Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { perfmon } for pid=3616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit[3616]: AVC avc: denied { bpf } for pid=3616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:11.482000 audit: BPF prog-id=165 op=LOAD Jul 15 11:32:11.482000 audit[3616]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000396078 items=0 ppid=3336 pid=3616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:11.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313166666332326131626534393932316663666436393131343865 Jul 15 11:32:11.565000 audit[3627]: AVC avc: denied { search } for pid=3627 comm="nginx" name="crypto" dev="proc" ino=25309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c48,c871 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:32:11.565000 audit[3627]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbff94ef728 a2=0 a3=0 items=0 ppid=3336 pid=3627 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c48,c871 key=(null) Jul 15 11:32:11.565000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:32:11.569560 env[1210]: time="2025-07-15T11:32:11.569504638Z" level=info msg="StartContainer for \"fc11ffc22a1be49921fcfd691148e61f63b1ed2a7e6823d7c6fd6fef0287b028\" returns successfully" Jul 15 11:32:11.570675 env[1210]: time="2025-07-15T11:32:11.570650449Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:32:11.757344 systemd-networkd[1032]: vxlan.calico: Gained IPv6LL Jul 15 11:32:14.183006 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount887853982.mount: Deactivated successfully. Jul 15 11:32:14.397608 env[1210]: time="2025-07-15T11:32:14.397564877Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:14.500932 env[1210]: time="2025-07-15T11:32:14.500863234Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:14.569869 env[1210]: time="2025-07-15T11:32:14.569798826Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:14.585154 env[1210]: time="2025-07-15T11:32:14.585096832Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:14.585797 env[1210]: time="2025-07-15T11:32:14.585747303Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 15 11:32:14.593701 env[1210]: time="2025-07-15T11:32:14.593633838Z" level=info msg="CreateContainer within sandbox \"f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:32:14.610548 env[1210]: time="2025-07-15T11:32:14.610489769Z" level=info msg="CreateContainer within sandbox \"f366aeae9896f1415e118fed2664301cfaa6f7fe36e51c7ee8faaef4138e78ec\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"10b2f89902e1cc8cf2aae316e4506c2d9c3164ad7c2b918a8e8b4b7d38c0e91d\"" Jul 15 11:32:14.611273 env[1210]: time="2025-07-15T11:32:14.611221402Z" level=info msg="StartContainer for \"10b2f89902e1cc8cf2aae316e4506c2d9c3164ad7c2b918a8e8b4b7d38c0e91d\"" Jul 15 11:32:14.629441 systemd[1]: Started cri-containerd-10b2f89902e1cc8cf2aae316e4506c2d9c3164ad7c2b918a8e8b4b7d38c0e91d.scope. Jul 15 11:32:14.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit: BPF prog-id=166 op=LOAD Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3336 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:14.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623266383939303265316363386366326161653331366534353036 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3336 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:14.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623266383939303265316363386366326161653331366534353036 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.639000 audit: BPF prog-id=167 op=LOAD Jul 15 11:32:14.639000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002b00c0 items=0 ppid=3336 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:14.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623266383939303265316363386366326161653331366534353036 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit: BPF prog-id=168 op=LOAD Jul 15 11:32:14.640000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002b0108 items=0 ppid=3336 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:14.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623266383939303265316363386366326161653331366534353036 Jul 15 11:32:14.640000 audit: BPF prog-id=168 op=UNLOAD Jul 15 11:32:14.640000 audit: BPF prog-id=167 op=UNLOAD Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:14.640000 audit: BPF prog-id=169 op=LOAD Jul 15 11:32:14.640000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002b0518 items=0 ppid=3336 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:14.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623266383939303265316363386366326161653331366534353036 Jul 15 11:32:14.666623 env[1210]: time="2025-07-15T11:32:14.666559269Z" level=info msg="StartContainer for \"10b2f89902e1cc8cf2aae316e4506c2d9c3164ad7c2b918a8e8b4b7d38c0e91d\" returns successfully" Jul 15 11:32:15.397400 env[1210]: time="2025-07-15T11:32:15.397336502Z" level=info msg="StopPodSandbox for \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\"" Jul 15 11:32:15.397649 env[1210]: time="2025-07-15T11:32:15.397336602Z" level=info msg="StopPodSandbox for \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\"" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.444 [INFO][3731] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.445 [INFO][3731] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" iface="eth0" netns="/var/run/netns/cni-6ef5765f-d2d2-77b2-0392-fef5e337bf68" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.445 [INFO][3731] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" iface="eth0" netns="/var/run/netns/cni-6ef5765f-d2d2-77b2-0392-fef5e337bf68" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.445 [INFO][3731] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" iface="eth0" netns="/var/run/netns/cni-6ef5765f-d2d2-77b2-0392-fef5e337bf68" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.445 [INFO][3731] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.445 [INFO][3731] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.467 [INFO][3750] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" HandleID="k8s-pod-network.0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.468 [INFO][3750] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.468 [INFO][3750] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.474 [WARNING][3750] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" HandleID="k8s-pod-network.0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.474 [INFO][3750] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" HandleID="k8s-pod-network.0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.475 [INFO][3750] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:15.481262 env[1210]: 2025-07-15 11:32:15.478 [INFO][3731] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:15.484555 systemd[1]: run-netns-cni\x2d6ef5765f\x2dd2d2\x2d77b2\x2d0392\x2dfef5e337bf68.mount: Deactivated successfully. Jul 15 11:32:15.485219 env[1210]: time="2025-07-15T11:32:15.485117064Z" level=info msg="TearDown network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\" successfully" Jul 15 11:32:15.485219 env[1210]: time="2025-07-15T11:32:15.485208506Z" level=info msg="StopPodSandbox for \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\" returns successfully" Jul 15 11:32:15.486389 env[1210]: time="2025-07-15T11:32:15.486364416Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffb65f685-f9jbv,Uid:08dca42d-99cd-4d6c-a05f-812cbc0e64a4,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.442 [INFO][3732] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.442 [INFO][3732] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" iface="eth0" netns="/var/run/netns/cni-6155acd6-6f74-a5c9-71c9-bf80b2b06146" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.442 [INFO][3732] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" iface="eth0" netns="/var/run/netns/cni-6155acd6-6f74-a5c9-71c9-bf80b2b06146" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.442 [INFO][3732] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" iface="eth0" netns="/var/run/netns/cni-6155acd6-6f74-a5c9-71c9-bf80b2b06146" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.442 [INFO][3732] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.442 [INFO][3732] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.468 [INFO][3748] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" HandleID="k8s-pod-network.93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.468 [INFO][3748] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.475 [INFO][3748] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.481 [WARNING][3748] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" HandleID="k8s-pod-network.93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.481 [INFO][3748] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" HandleID="k8s-pod-network.93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.485 [INFO][3748] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:15.490421 env[1210]: 2025-07-15 11:32:15.488 [INFO][3732] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:15.490755 env[1210]: time="2025-07-15T11:32:15.490531197Z" level=info msg="TearDown network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\" successfully" Jul 15 11:32:15.490755 env[1210]: time="2025-07-15T11:32:15.490555943Z" level=info msg="StopPodSandbox for \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\" returns successfully" Jul 15 11:32:15.490803 kubelet[1964]: E0715 11:32:15.490720 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:15.491328 env[1210]: time="2025-07-15T11:32:15.491265696Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-csjbt,Uid:41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf,Namespace:kube-system,Attempt:1,}" Jul 15 11:32:15.493572 systemd[1]: run-netns-cni\x2d6155acd6\x2d6f74\x2da5c9\x2d71c9\x2dbf80b2b06146.mount: Deactivated successfully. Jul 15 11:32:15.602888 systemd-networkd[1032]: cali60e1ca98698: Link UP Jul 15 11:32:15.612686 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:32:15.612720 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali60e1ca98698: link becomes ready Jul 15 11:32:15.606000 audit[3814]: NETFILTER_CFG table=filter:105 family=2 entries=19 op=nft_register_rule pid=3814 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:15.606000 audit[3814]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffffc32080 a2=0 a3=7fffffc3206c items=0 ppid=2078 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.606000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:15.616580 systemd-networkd[1032]: cali60e1ca98698: Gained carrier Jul 15 11:32:15.617000 audit[3814]: NETFILTER_CFG table=nat:106 family=2 entries=21 op=nft_register_chain pid=3814 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:15.617000 audit[3814]: SYSCALL arch=c000003e syscall=46 success=yes exit=7044 a0=3 a1=7fffffc32080 a2=0 a3=7fffffc3206c items=0 ppid=2078 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.617000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:15.624197 kubelet[1964]: I0715 11:32:15.623790 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-5c9859466d-6fljn" podStartSLOduration=2.119694591 podStartE2EDuration="6.623770325s" podCreationTimestamp="2025-07-15 11:32:09 +0000 UTC" firstStartedPulling="2025-07-15 11:32:10.082654204 +0000 UTC m=+37.776942050" lastFinishedPulling="2025-07-15 11:32:14.586729938 +0000 UTC m=+42.281017784" observedRunningTime="2025-07-15 11:32:15.589197833 +0000 UTC m=+43.283485679" watchObservedRunningTime="2025-07-15 11:32:15.623770325 +0000 UTC m=+43.318058161" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.532 [INFO][3766] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0 calico-apiserver-6ffb65f685- calico-apiserver 08dca42d-99cd-4d6c-a05f-812cbc0e64a4 1007 0 2025-07-15 11:31:45 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6ffb65f685 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6ffb65f685-f9jbv eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali60e1ca98698 [] [] }} ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-f9jbv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.532 [INFO][3766] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-f9jbv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.559 [INFO][3795] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" HandleID="k8s-pod-network.8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.560 [INFO][3795] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" HandleID="k8s-pod-network.8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00034d5f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6ffb65f685-f9jbv", "timestamp":"2025-07-15 11:32:15.55993657 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.560 [INFO][3795] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.560 [INFO][3795] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.560 [INFO][3795] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.568 [INFO][3795] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" host="localhost" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.572 [INFO][3795] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.576 [INFO][3795] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.578 [INFO][3795] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.580 [INFO][3795] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.580 [INFO][3795] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" host="localhost" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.581 [INFO][3795] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558 Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.584 [INFO][3795] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" host="localhost" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.593 [INFO][3795] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" host="localhost" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.593 [INFO][3795] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" host="localhost" Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.593 [INFO][3795] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:15.627514 env[1210]: 2025-07-15 11:32:15.594 [INFO][3795] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" HandleID="k8s-pod-network.8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.628091 env[1210]: 2025-07-15 11:32:15.596 [INFO][3766] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-f9jbv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0", GenerateName:"calico-apiserver-6ffb65f685-", Namespace:"calico-apiserver", SelfLink:"", UID:"08dca42d-99cd-4d6c-a05f-812cbc0e64a4", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffb65f685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6ffb65f685-f9jbv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali60e1ca98698", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:15.628091 env[1210]: 2025-07-15 11:32:15.597 [INFO][3766] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-f9jbv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.628091 env[1210]: 2025-07-15 11:32:15.597 [INFO][3766] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali60e1ca98698 ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-f9jbv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.628091 env[1210]: 2025-07-15 11:32:15.608 [INFO][3766] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-f9jbv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.628091 env[1210]: 2025-07-15 11:32:15.617 [INFO][3766] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-f9jbv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0", GenerateName:"calico-apiserver-6ffb65f685-", Namespace:"calico-apiserver", SelfLink:"", UID:"08dca42d-99cd-4d6c-a05f-812cbc0e64a4", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffb65f685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558", Pod:"calico-apiserver-6ffb65f685-f9jbv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali60e1ca98698", MAC:"3e:05:52:c3:ae:15", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:15.628091 env[1210]: 2025-07-15 11:32:15.625 [INFO][3766] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-f9jbv" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:15.638210 env[1210]: time="2025-07-15T11:32:15.638114800Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:15.638314 env[1210]: time="2025-07-15T11:32:15.638235165Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:15.638314 env[1210]: time="2025-07-15T11:32:15.638272946Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:15.638519 env[1210]: time="2025-07-15T11:32:15.638447844Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558 pid=3833 runtime=io.containerd.runc.v2 Jul 15 11:32:15.640000 audit[3844]: NETFILTER_CFG table=filter:107 family=2 entries=50 op=nft_register_chain pid=3844 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:15.640000 audit[3844]: SYSCALL arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7ffdb6ec2250 a2=0 a3=7ffdb6ec223c items=0 ppid=3387 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.640000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:15.658894 systemd[1]: Started cri-containerd-8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558.scope. Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.670020 kernel: kauditd_printk_skb: 264 callbacks suppressed Jul 15 11:32:15.670477 kernel: audit: type=1400 audit(1752579135.667:1190): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.677170 kernel: audit: type=1400 audit(1752579135.667:1191): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.677268 kernel: audit: type=1400 audit(1752579135.667:1192): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.683299 kernel: audit: type=1400 audit(1752579135.667:1193): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.682186 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.691650 kernel: audit: type=1400 audit(1752579135.667:1194): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.691739 kernel: audit: type=1400 audit(1752579135.667:1195): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.691801 kernel: audit: type=1400 audit(1752579135.667:1196): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.698407 kernel: audit: type=1400 audit(1752579135.667:1197): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.699632 kernel: audit: type=1400 audit(1752579135.667:1198): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.667000 audit: BPF prog-id=170 op=LOAD Jul 15 11:32:15.707249 kernel: audit: type=1400 audit(1752579135.667:1199): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353730383534366137313864663638633562353234663937623565 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353730383534366137313864663638633562353234663937623565 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit: BPF prog-id=171 op=LOAD Jul 15 11:32:15.668000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00029b200 items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353730383534366137313864663638633562353234663937623565 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.668000 audit: BPF prog-id=172 op=LOAD Jul 15 11:32:15.668000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00029b248 items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353730383534366137313864663638633562353234663937623565 Jul 15 11:32:15.672000 audit: BPF prog-id=172 op=UNLOAD Jul 15 11:32:15.672000 audit: BPF prog-id=171 op=UNLOAD Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:15.672000 audit: BPF prog-id=173 op=LOAD Jul 15 11:32:15.672000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00029b658 items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353730383534366137313864663638633562353234663937623565 Jul 15 11:32:15.713638 env[1210]: time="2025-07-15T11:32:15.713597660Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffb65f685-f9jbv,Uid:08dca42d-99cd-4d6c-a05f-812cbc0e64a4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558\"" Jul 15 11:32:15.715206 env[1210]: time="2025-07-15T11:32:15.715170172Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:32:15.721857 systemd-networkd[1032]: calied1a9550c22: Link UP Jul 15 11:32:15.728159 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calied1a9550c22: link becomes ready Jul 15 11:32:15.723155 systemd-networkd[1032]: calied1a9550c22: Gained carrier Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.538 [INFO][3777] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--csjbt-eth0 coredns-674b8bbfcf- kube-system 41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf 1006 0 2025-07-15 11:31:37 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-csjbt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calied1a9550c22 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Namespace="kube-system" Pod="coredns-674b8bbfcf-csjbt" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--csjbt-" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.538 [INFO][3777] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Namespace="kube-system" Pod="coredns-674b8bbfcf-csjbt" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.561 [INFO][3801] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" HandleID="k8s-pod-network.ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.561 [INFO][3801] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" HandleID="k8s-pod-network.ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000139740), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-csjbt", "timestamp":"2025-07-15 11:32:15.561428461 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.561 [INFO][3801] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.594 [INFO][3801] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.594 [INFO][3801] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.668 [INFO][3801] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" host="localhost" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.680 [INFO][3801] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.692 [INFO][3801] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.695 [INFO][3801] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.700 [INFO][3801] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.700 [INFO][3801] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" host="localhost" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.704 [INFO][3801] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90 Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.708 [INFO][3801] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" host="localhost" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.713 [INFO][3801] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" host="localhost" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.713 [INFO][3801] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" host="localhost" Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.713 [INFO][3801] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:15.755732 env[1210]: 2025-07-15 11:32:15.713 [INFO][3801] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" HandleID="k8s-pod-network.ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.765522 env[1210]: 2025-07-15 11:32:15.717 [INFO][3777] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Namespace="kube-system" Pod="coredns-674b8bbfcf-csjbt" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--csjbt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf", ResourceVersion:"1006", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-csjbt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calied1a9550c22", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:15.765522 env[1210]: 2025-07-15 11:32:15.718 [INFO][3777] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Namespace="kube-system" Pod="coredns-674b8bbfcf-csjbt" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.765522 env[1210]: 2025-07-15 11:32:15.718 [INFO][3777] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calied1a9550c22 ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Namespace="kube-system" Pod="coredns-674b8bbfcf-csjbt" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.765522 env[1210]: 2025-07-15 11:32:15.723 [INFO][3777] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Namespace="kube-system" Pod="coredns-674b8bbfcf-csjbt" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.765522 env[1210]: 2025-07-15 11:32:15.724 [INFO][3777] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Namespace="kube-system" Pod="coredns-674b8bbfcf-csjbt" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--csjbt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf", ResourceVersion:"1006", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90", Pod:"coredns-674b8bbfcf-csjbt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calied1a9550c22", MAC:"d6:b6:2d:78:ce:e9", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:15.765522 env[1210]: 2025-07-15 11:32:15.752 [INFO][3777] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90" Namespace="kube-system" Pod="coredns-674b8bbfcf-csjbt" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:15.778000 audit[3886]: NETFILTER_CFG table=filter:108 family=2 entries=46 op=nft_register_chain pid=3886 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:15.778000 audit[3886]: SYSCALL arch=c000003e syscall=46 success=yes exit=23740 a0=3 a1=7ffc064930d0 a2=0 a3=7ffc064930bc items=0 ppid=3387 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:15.778000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:16.009433 systemd[1]: Started sshd@9-10.0.0.76:22-10.0.0.1:54330.service. Jul 15 11:32:16.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.76:22-10.0.0.1:54330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.086491 env[1210]: time="2025-07-15T11:32:16.086419269Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:16.086667 env[1210]: time="2025-07-15T11:32:16.086469403Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:16.086667 env[1210]: time="2025-07-15T11:32:16.086483649Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:16.086775 env[1210]: time="2025-07-15T11:32:16.086651345Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90 pid=3896 runtime=io.containerd.runc.v2 Jul 15 11:32:16.098000 audit[3888]: USER_ACCT pid=3888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:16.099000 audit[3888]: CRED_ACQ pid=3888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:16.101234 sshd[3888]: Accepted publickey for core from 10.0.0.1 port 54330 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:16.100395 systemd[1]: Started cri-containerd-ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90.scope. Jul 15 11:32:16.100000 audit[3888]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd455f2c40 a2=3 a3=0 items=0 ppid=1 pid=3888 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.100000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:16.102512 sshd[3888]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:16.107928 systemd[1]: Started session-10.scope. Jul 15 11:32:16.108562 systemd-logind[1201]: New session 10 of user core. Jul 15 11:32:16.115000 audit[3888]: USER_START pid=3888 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:16.116000 audit[3920]: CRED_ACQ pid=3920 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.117000 audit: BPF prog-id=174 op=LOAD Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3896 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666303365363938633734323039326532383961373561396466616433 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3896 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666303365363938633734323039326532383961373561396466616433 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.118000 audit: BPF prog-id=175 op=LOAD Jul 15 11:32:16.118000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002afb90 items=0 ppid=3896 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666303365363938633734323039326532383961373561396466616433 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit: BPF prog-id=176 op=LOAD Jul 15 11:32:16.119000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002afbd8 items=0 ppid=3896 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666303365363938633734323039326532383961373561396466616433 Jul 15 11:32:16.119000 audit: BPF prog-id=176 op=UNLOAD Jul 15 11:32:16.119000 audit: BPF prog-id=175 op=UNLOAD Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.119000 audit: BPF prog-id=177 op=LOAD Jul 15 11:32:16.119000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002affe8 items=0 ppid=3896 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666303365363938633734323039326532383961373561396466616433 Jul 15 11:32:16.121498 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:32:16.147103 env[1210]: time="2025-07-15T11:32:16.147047549Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-csjbt,Uid:41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf,Namespace:kube-system,Attempt:1,} returns sandbox id \"ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90\"" Jul 15 11:32:16.148105 kubelet[1964]: E0715 11:32:16.148074 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:16.154915 env[1210]: time="2025-07-15T11:32:16.154863869Z" level=info msg="CreateContainer within sandbox \"ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:32:16.176535 env[1210]: time="2025-07-15T11:32:16.176482323Z" level=info msg="CreateContainer within sandbox \"ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"459b026196fdacabb0be8f90f4ccdaaf4fc38a742360ced6594900afb827925d\"" Jul 15 11:32:16.177631 env[1210]: time="2025-07-15T11:32:16.177610300Z" level=info msg="StartContainer for \"459b026196fdacabb0be8f90f4ccdaaf4fc38a742360ced6594900afb827925d\"" Jul 15 11:32:16.195667 systemd[1]: Started cri-containerd-459b026196fdacabb0be8f90f4ccdaaf4fc38a742360ced6594900afb827925d.scope. Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.209000 audit: BPF prog-id=178 op=LOAD Jul 15 11:32:16.210000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.210000 audit[3946]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3896 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435396230323631393666646163616262306265386639306634636364 Jul 15 11:32:16.210000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.210000 audit[3946]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3896 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435396230323631393666646163616262306265386639306634636364 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit: BPF prog-id=179 op=LOAD Jul 15 11:32:16.211000 audit[3946]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00024f640 items=0 ppid=3896 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435396230323631393666646163616262306265386639306634636364 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.211000 audit: BPF prog-id=180 op=LOAD Jul 15 11:32:16.211000 audit[3946]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00024f688 items=0 ppid=3896 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435396230323631393666646163616262306265386639306634636364 Jul 15 11:32:16.212000 audit: BPF prog-id=180 op=UNLOAD Jul 15 11:32:16.212000 audit: BPF prog-id=179 op=UNLOAD Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { perfmon } for pid=3946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit[3946]: AVC avc: denied { bpf } for pid=3946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.212000 audit: BPF prog-id=181 op=LOAD Jul 15 11:32:16.212000 audit[3946]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00024fa98 items=0 ppid=3896 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435396230323631393666646163616262306265386639306634636364 Jul 15 11:32:16.243050 env[1210]: time="2025-07-15T11:32:16.242997501Z" level=info msg="StartContainer for \"459b026196fdacabb0be8f90f4ccdaaf4fc38a742360ced6594900afb827925d\" returns successfully" Jul 15 11:32:16.274738 sshd[3888]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:16.275000 audit[3888]: USER_END pid=3888 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:16.275000 audit[3888]: CRED_DISP pid=3888 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:16.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.76:22-10.0.0.1:54330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:16.278398 systemd[1]: sshd@9-10.0.0.76:22-10.0.0.1:54330.service: Deactivated successfully. Jul 15 11:32:16.279328 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:32:16.280866 systemd-logind[1201]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:32:16.282237 systemd-logind[1201]: Removed session 10. Jul 15 11:32:16.292000 audit[3957]: AVC avc: denied { getattr } for pid=3957 comm="coredns" path="cgroup:[4026532423]" dev="nsfs" ino=4026532423 scontext=system_u:system_r:svirt_lxc_net_t:s0:c711,c768 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:32:16.292000 audit[3957]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00015eac8 a2=c000144038 a3=0 items=0 ppid=3896 pid=3957 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c711,c768 key=(null) Jul 15 11:32:16.292000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:32:16.397195 env[1210]: time="2025-07-15T11:32:16.397146545Z" level=info msg="StopPodSandbox for \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\"" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.437 [INFO][4002] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.437 [INFO][4002] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" iface="eth0" netns="/var/run/netns/cni-b183e26b-2c68-d9ed-0f44-68c01849e006" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.438 [INFO][4002] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" iface="eth0" netns="/var/run/netns/cni-b183e26b-2c68-d9ed-0f44-68c01849e006" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.438 [INFO][4002] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" iface="eth0" netns="/var/run/netns/cni-b183e26b-2c68-d9ed-0f44-68c01849e006" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.438 [INFO][4002] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.438 [INFO][4002] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.456 [INFO][4011] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" HandleID="k8s-pod-network.36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.457 [INFO][4011] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.457 [INFO][4011] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.462 [WARNING][4011] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" HandleID="k8s-pod-network.36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.462 [INFO][4011] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" HandleID="k8s-pod-network.36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.464 [INFO][4011] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:16.468028 env[1210]: 2025-07-15 11:32:16.466 [INFO][4002] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:16.468878 env[1210]: time="2025-07-15T11:32:16.468167700Z" level=info msg="TearDown network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\" successfully" Jul 15 11:32:16.468878 env[1210]: time="2025-07-15T11:32:16.468197135Z" level=info msg="StopPodSandbox for \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\" returns successfully" Jul 15 11:32:16.469270 env[1210]: time="2025-07-15T11:32:16.469225105Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-8kc9f,Uid:d2f1d298-58ec-4a3a-b674-a51540fedfbb,Namespace:calico-system,Attempt:1,}" Jul 15 11:32:16.568014 systemd-networkd[1032]: cali7ea4b3ef3d4: Link UP Jul 15 11:32:16.569647 systemd-networkd[1032]: cali7ea4b3ef3d4: Gained carrier Jul 15 11:32:16.570215 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7ea4b3ef3d4: link becomes ready Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.510 [INFO][4019] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--8kc9f-eth0 csi-node-driver- calico-system d2f1d298-58ec-4a3a-b674-a51540fedfbb 1030 0 2025-07-15 11:31:49 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-8kc9f eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali7ea4b3ef3d4 [] [] }} ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Namespace="calico-system" Pod="csi-node-driver-8kc9f" WorkloadEndpoint="localhost-k8s-csi--node--driver--8kc9f-" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.510 [INFO][4019] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Namespace="calico-system" Pod="csi-node-driver-8kc9f" WorkloadEndpoint="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.533 [INFO][4034] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" HandleID="k8s-pod-network.e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.533 [INFO][4034] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" HandleID="k8s-pod-network.e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d7a80), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-8kc9f", "timestamp":"2025-07-15 11:32:16.533384572 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.533 [INFO][4034] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.533 [INFO][4034] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.533 [INFO][4034] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.541 [INFO][4034] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" host="localhost" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.545 [INFO][4034] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.550 [INFO][4034] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.551 [INFO][4034] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.553 [INFO][4034] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.553 [INFO][4034] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" host="localhost" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.554 [INFO][4034] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275 Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.558 [INFO][4034] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" host="localhost" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.562 [INFO][4034] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" host="localhost" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.562 [INFO][4034] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" host="localhost" Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.562 [INFO][4034] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:16.580181 env[1210]: 2025-07-15 11:32:16.563 [INFO][4034] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" HandleID="k8s-pod-network.e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.580829 env[1210]: 2025-07-15 11:32:16.565 [INFO][4019] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Namespace="calico-system" Pod="csi-node-driver-8kc9f" WorkloadEndpoint="localhost-k8s-csi--node--driver--8kc9f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--8kc9f-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d2f1d298-58ec-4a3a-b674-a51540fedfbb", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-8kc9f", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7ea4b3ef3d4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:16.580829 env[1210]: 2025-07-15 11:32:16.565 [INFO][4019] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Namespace="calico-system" Pod="csi-node-driver-8kc9f" WorkloadEndpoint="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.580829 env[1210]: 2025-07-15 11:32:16.565 [INFO][4019] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7ea4b3ef3d4 ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Namespace="calico-system" Pod="csi-node-driver-8kc9f" WorkloadEndpoint="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.580829 env[1210]: 2025-07-15 11:32:16.569 [INFO][4019] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Namespace="calico-system" Pod="csi-node-driver-8kc9f" WorkloadEndpoint="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.580829 env[1210]: 2025-07-15 11:32:16.570 [INFO][4019] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Namespace="calico-system" Pod="csi-node-driver-8kc9f" WorkloadEndpoint="localhost-k8s-csi--node--driver--8kc9f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--8kc9f-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d2f1d298-58ec-4a3a-b674-a51540fedfbb", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275", Pod:"csi-node-driver-8kc9f", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7ea4b3ef3d4", MAC:"c2:66:a3:a9:f3:71", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:16.580829 env[1210]: 2025-07-15 11:32:16.578 [INFO][4019] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275" Namespace="calico-system" Pod="csi-node-driver-8kc9f" WorkloadEndpoint="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:16.586996 kubelet[1964]: E0715 11:32:16.586965 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:16.586000 audit[4051]: NETFILTER_CFG table=filter:109 family=2 entries=44 op=nft_register_chain pid=4051 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:16.586000 audit[4051]: SYSCALL arch=c000003e syscall=46 success=yes exit=21952 a0=3 a1=7fff9fdb65f0 a2=0 a3=7fff9fdb65dc items=0 ppid=3387 pid=4051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.586000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:16.593642 env[1210]: time="2025-07-15T11:32:16.593512392Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:16.593706 env[1210]: time="2025-07-15T11:32:16.593636025Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:16.593740 env[1210]: time="2025-07-15T11:32:16.593704293Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:16.594076 env[1210]: time="2025-07-15T11:32:16.593983987Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275 pid=4059 runtime=io.containerd.runc.v2 Jul 15 11:32:16.607725 systemd[1]: Started cri-containerd-e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275.scope. Jul 15 11:32:16.607000 audit[4079]: NETFILTER_CFG table=filter:110 family=2 entries=18 op=nft_register_rule pid=4079 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:16.607000 audit[4079]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc55493920 a2=0 a3=7ffc5549390c items=0 ppid=2078 pid=4079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.607000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:16.613951 systemd[1]: run-netns-cni\x2db183e26b\x2d2c68\x2dd9ed\x2d0f44\x2d68c01849e006.mount: Deactivated successfully. Jul 15 11:32:16.616306 kubelet[1964]: I0715 11:32:16.613609 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-csjbt" podStartSLOduration=39.61359246 podStartE2EDuration="39.61359246s" podCreationTimestamp="2025-07-15 11:31:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:32:16.598102708 +0000 UTC m=+44.292390554" watchObservedRunningTime="2025-07-15 11:32:16.61359246 +0000 UTC m=+44.307880306" Jul 15 11:32:16.615000 audit[4079]: NETFILTER_CFG table=nat:111 family=2 entries=16 op=nft_register_rule pid=4079 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:16.615000 audit[4079]: SYSCALL arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffc55493920 a2=0 a3=0 items=0 ppid=2078 pid=4079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.615000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.628000 audit: BPF prog-id=182 op=LOAD Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4059 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564623466323664346566626262663934333737343031366562 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4059 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564623466323664346566626262663934333737343031366562 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit: BPF prog-id=183 op=LOAD Jul 15 11:32:16.629000 audit[4068]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0002fc910 items=0 ppid=4059 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564623466323664346566626262663934333737343031366562 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit: BPF prog-id=184 op=LOAD Jul 15 11:32:16.629000 audit[4068]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0002fc958 items=0 ppid=4059 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564623466323664346566626262663934333737343031366562 Jul 15 11:32:16.629000 audit: BPF prog-id=184 op=UNLOAD Jul 15 11:32:16.629000 audit: BPF prog-id=183 op=UNLOAD Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { perfmon } for pid=4068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit[4068]: AVC avc: denied { bpf } for pid=4068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:16.629000 audit: BPF prog-id=185 op=LOAD Jul 15 11:32:16.629000 audit[4068]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0002fcd68 items=0 ppid=4059 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564623466323664346566626262663934333737343031366562 Jul 15 11:32:16.631332 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:32:16.638000 audit[4089]: NETFILTER_CFG table=filter:112 family=2 entries=15 op=nft_register_rule pid=4089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:16.638000 audit[4089]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdce58dd90 a2=0 a3=7ffdce58dd7c items=0 ppid=2078 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.638000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:16.642000 audit[4089]: NETFILTER_CFG table=nat:113 family=2 entries=37 op=nft_register_chain pid=4089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:16.642000 audit[4089]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffdce58dd90 a2=0 a3=7ffdce58dd7c items=0 ppid=2078 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:16.642000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:16.645330 env[1210]: time="2025-07-15T11:32:16.645297364Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-8kc9f,Uid:d2f1d298-58ec-4a3a-b674-a51540fedfbb,Namespace:calico-system,Attempt:1,} returns sandbox id \"e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275\"" Jul 15 11:32:17.069303 systemd-networkd[1032]: cali60e1ca98698: Gained IPv6LL Jul 15 11:32:17.396380 env[1210]: time="2025-07-15T11:32:17.396258185Z" level=info msg="StopPodSandbox for \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\"" Jul 15 11:32:17.396633 env[1210]: time="2025-07-15T11:32:17.396583986Z" level=info msg="StopPodSandbox for \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\"" Jul 15 11:32:17.396811 env[1210]: time="2025-07-15T11:32:17.396500951Z" level=info msg="StopPodSandbox for \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\"" Jul 15 11:32:17.396986 env[1210]: time="2025-07-15T11:32:17.396509477Z" level=info msg="StopPodSandbox for \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\"" Jul 15 11:32:17.581278 systemd-networkd[1032]: calied1a9550c22: Gained IPv6LL Jul 15 11:32:17.589681 kubelet[1964]: E0715 11:32:17.589644 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.455 [INFO][4140] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.455 [INFO][4140] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" iface="eth0" netns="/var/run/netns/cni-a3d6f8cd-fc6f-f44a-103c-754582d88caa" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.455 [INFO][4140] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" iface="eth0" netns="/var/run/netns/cni-a3d6f8cd-fc6f-f44a-103c-754582d88caa" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.455 [INFO][4140] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" iface="eth0" netns="/var/run/netns/cni-a3d6f8cd-fc6f-f44a-103c-754582d88caa" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.455 [INFO][4140] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.455 [INFO][4140] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.493 [INFO][4174] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" HandleID="k8s-pod-network.f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.493 [INFO][4174] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.493 [INFO][4174] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.596 [WARNING][4174] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" HandleID="k8s-pod-network.f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.596 [INFO][4174] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" HandleID="k8s-pod-network.f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.675 [INFO][4174] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:17.679361 env[1210]: 2025-07-15 11:32:17.677 [INFO][4140] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:17.679361 env[1210]: time="2025-07-15T11:32:17.678668385Z" level=info msg="TearDown network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\" successfully" Jul 15 11:32:17.679361 env[1210]: time="2025-07-15T11:32:17.678701487Z" level=info msg="StopPodSandbox for \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\" returns successfully" Jul 15 11:32:17.681693 env[1210]: time="2025-07-15T11:32:17.681527781Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffb65f685-bdghj,Uid:c7061ccf-2f9c-4d34-9c87-a58c506705c4,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:32:17.681896 systemd[1]: run-netns-cni\x2da3d6f8cd\x2dfc6f\x2df44a\x2d103c\x2d754582d88caa.mount: Deactivated successfully. Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.459 [INFO][4141] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.459 [INFO][4141] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" iface="eth0" netns="/var/run/netns/cni-6bc9daee-7786-6c17-db31-27dd28719be6" Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.459 [INFO][4141] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" iface="eth0" netns="/var/run/netns/cni-6bc9daee-7786-6c17-db31-27dd28719be6" Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.460 [INFO][4141] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" iface="eth0" netns="/var/run/netns/cni-6bc9daee-7786-6c17-db31-27dd28719be6" Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.460 [INFO][4141] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.460 [INFO][4141] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.496 [INFO][4175] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" HandleID="k8s-pod-network.6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.496 [INFO][4175] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.675 [INFO][4175] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.682 [WARNING][4175] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" HandleID="k8s-pod-network.6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.682 [INFO][4175] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" HandleID="k8s-pod-network.6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.684 [INFO][4175] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:17.700646 env[1210]: 2025-07-15 11:32:17.695 [INFO][4141] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:17.703509 systemd[1]: run-netns-cni\x2d6bc9daee\x2d7786\x2d6c17\x2ddb31\x2d27dd28719be6.mount: Deactivated successfully. Jul 15 11:32:17.705010 env[1210]: time="2025-07-15T11:32:17.704971038Z" level=info msg="TearDown network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\" successfully" Jul 15 11:32:17.705106 env[1210]: time="2025-07-15T11:32:17.705084280Z" level=info msg="StopPodSandbox for \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\" returns successfully" Jul 15 11:32:17.705775 env[1210]: time="2025-07-15T11:32:17.705751632Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qw2q7,Uid:1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c,Namespace:calico-system,Attempt:1,}" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.450 [INFO][4139] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.452 [INFO][4139] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" iface="eth0" netns="/var/run/netns/cni-d929c794-b51b-a9b1-9e59-9944fd22e873" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.452 [INFO][4139] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" iface="eth0" netns="/var/run/netns/cni-d929c794-b51b-a9b1-9e59-9944fd22e873" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.452 [INFO][4139] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" iface="eth0" netns="/var/run/netns/cni-d929c794-b51b-a9b1-9e59-9944fd22e873" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.452 [INFO][4139] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.452 [INFO][4139] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.499 [INFO][4169] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" HandleID="k8s-pod-network.4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.499 [INFO][4169] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.684 [INFO][4169] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.690 [WARNING][4169] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" HandleID="k8s-pod-network.4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.690 [INFO][4169] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" HandleID="k8s-pod-network.4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.696 [INFO][4169] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:17.709541 env[1210]: 2025-07-15 11:32:17.706 [INFO][4139] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:17.711991 systemd[1]: run-netns-cni\x2dd929c794\x2db51b\x2da9b1\x2d9e59\x2d9944fd22e873.mount: Deactivated successfully. Jul 15 11:32:17.712711 env[1210]: time="2025-07-15T11:32:17.712276888Z" level=info msg="TearDown network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\" successfully" Jul 15 11:32:17.712711 env[1210]: time="2025-07-15T11:32:17.712311243Z" level=info msg="StopPodSandbox for \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\" returns successfully" Jul 15 11:32:17.712784 kubelet[1964]: E0715 11:32:17.712615 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:17.713367 env[1210]: time="2025-07-15T11:32:17.713299678Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-v87x5,Uid:c9724c60-b989-4af1-8667-515bc34b0af7,Namespace:kube-system,Attempt:1,}" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.457 [INFO][4154] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.457 [INFO][4154] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" iface="eth0" netns="/var/run/netns/cni-3853ceb2-4ec1-1434-f081-c5939de56b1c" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.457 [INFO][4154] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" iface="eth0" netns="/var/run/netns/cni-3853ceb2-4ec1-1434-f081-c5939de56b1c" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.457 [INFO][4154] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" iface="eth0" netns="/var/run/netns/cni-3853ceb2-4ec1-1434-f081-c5939de56b1c" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.457 [INFO][4154] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.457 [INFO][4154] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.508 [INFO][4176] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" HandleID="k8s-pod-network.8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.508 [INFO][4176] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.712 [INFO][4176] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.719 [WARNING][4176] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" HandleID="k8s-pod-network.8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.719 [INFO][4176] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" HandleID="k8s-pod-network.8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.720 [INFO][4176] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:17.725499 env[1210]: 2025-07-15 11:32:17.723 [INFO][4154] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:17.729620 env[1210]: time="2025-07-15T11:32:17.727979918Z" level=info msg="TearDown network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\" successfully" Jul 15 11:32:17.729620 env[1210]: time="2025-07-15T11:32:17.728014473Z" level=info msg="StopPodSandbox for \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\" returns successfully" Jul 15 11:32:17.729620 env[1210]: time="2025-07-15T11:32:17.728765663Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6d6d5bf84f-kwsqq,Uid:6ed339ad-27b3-4a4b-aac6-c54676ad507d,Namespace:calico-system,Attempt:1,}" Jul 15 11:32:17.728522 systemd[1]: run-netns-cni\x2d3853ceb2\x2d4ec1\x2d1434\x2df081\x2dc5939de56b1c.mount: Deactivated successfully. Jul 15 11:32:17.878622 systemd-networkd[1032]: cali7318ccfe48d: Link UP Jul 15 11:32:17.882111 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:32:17.882453 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7318ccfe48d: link becomes ready Jul 15 11:32:17.882209 systemd-networkd[1032]: cali7318ccfe48d: Gained carrier Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.785 [INFO][4205] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0 calico-apiserver-6ffb65f685- calico-apiserver c7061ccf-2f9c-4d34-9c87-a58c506705c4 1055 0 2025-07-15 11:31:45 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6ffb65f685 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6ffb65f685-bdghj eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali7318ccfe48d [] [] }} ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-bdghj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.785 [INFO][4205] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-bdghj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.833 [INFO][4260] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" HandleID="k8s-pod-network.32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.835 [INFO][4260] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" HandleID="k8s-pod-network.32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000426530), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6ffb65f685-bdghj", "timestamp":"2025-07-15 11:32:17.833880572 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.835 [INFO][4260] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.835 [INFO][4260] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.835 [INFO][4260] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.843 [INFO][4260] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" host="localhost" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.850 [INFO][4260] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.855 [INFO][4260] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.856 [INFO][4260] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.859 [INFO][4260] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.859 [INFO][4260] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" host="localhost" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.860 [INFO][4260] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.865 [INFO][4260] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" host="localhost" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.871 [INFO][4260] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" host="localhost" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.871 [INFO][4260] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" host="localhost" Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.871 [INFO][4260] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:17.893971 env[1210]: 2025-07-15 11:32:17.871 [INFO][4260] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" HandleID="k8s-pod-network.32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.894551 env[1210]: 2025-07-15 11:32:17.873 [INFO][4205] cni-plugin/k8s.go 418: Populated endpoint ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-bdghj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0", GenerateName:"calico-apiserver-6ffb65f685-", Namespace:"calico-apiserver", SelfLink:"", UID:"c7061ccf-2f9c-4d34-9c87-a58c506705c4", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffb65f685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6ffb65f685-bdghj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7318ccfe48d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:17.894551 env[1210]: 2025-07-15 11:32:17.873 [INFO][4205] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-bdghj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.894551 env[1210]: 2025-07-15 11:32:17.873 [INFO][4205] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7318ccfe48d ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-bdghj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.894551 env[1210]: 2025-07-15 11:32:17.883 [INFO][4205] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-bdghj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.894551 env[1210]: 2025-07-15 11:32:17.883 [INFO][4205] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-bdghj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0", GenerateName:"calico-apiserver-6ffb65f685-", Namespace:"calico-apiserver", SelfLink:"", UID:"c7061ccf-2f9c-4d34-9c87-a58c506705c4", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffb65f685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf", Pod:"calico-apiserver-6ffb65f685-bdghj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7318ccfe48d", MAC:"76:b2:27:3e:f1:b8", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:17.894551 env[1210]: 2025-07-15 11:32:17.890 [INFO][4205] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf" Namespace="calico-apiserver" Pod="calico-apiserver-6ffb65f685-bdghj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:17.909000 audit[4312]: NETFILTER_CFG table=filter:114 family=2 entries=55 op=nft_register_chain pid=4312 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:17.909000 audit[4312]: SYSCALL arch=c000003e syscall=46 success=yes exit=28304 a0=3 a1=7ffe7cd70b00 a2=0 a3=7ffe7cd70aec items=0 ppid=3387 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:17.909000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:17.919440 env[1210]: time="2025-07-15T11:32:17.919362928Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:17.919440 env[1210]: time="2025-07-15T11:32:17.919405909Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:17.919440 env[1210]: time="2025-07-15T11:32:17.919415887Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:17.919640 env[1210]: time="2025-07-15T11:32:17.919551822Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf pid=4316 runtime=io.containerd.runc.v2 Jul 15 11:32:17.932330 systemd[1]: Started cri-containerd-32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf.scope. Jul 15 11:32:17.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.950000 audit: BPF prog-id=186 op=LOAD Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4316 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:17.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332663463383731326437643463386365616632393239363837343036 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4316 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:17.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332663463383731326437643463386365616632393239363837343036 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit: BPF prog-id=187 op=LOAD Jul 15 11:32:17.952000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000310820 items=0 ppid=4316 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:17.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332663463383731326437643463386365616632393239363837343036 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit: BPF prog-id=188 op=LOAD Jul 15 11:32:17.952000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000310868 items=0 ppid=4316 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:17.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332663463383731326437643463386365616632393239363837343036 Jul 15 11:32:17.952000 audit: BPF prog-id=188 op=UNLOAD Jul 15 11:32:17.952000 audit: BPF prog-id=187 op=UNLOAD Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:17.952000 audit: BPF prog-id=189 op=LOAD Jul 15 11:32:17.952000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000310c78 items=0 ppid=4316 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:17.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332663463383731326437643463386365616632393239363837343036 Jul 15 11:32:17.954465 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:32:17.983020 env[1210]: time="2025-07-15T11:32:17.982958468Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffb65f685-bdghj,Uid:c7061ccf-2f9c-4d34-9c87-a58c506705c4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf\"" Jul 15 11:32:17.983167 systemd-networkd[1032]: calid0a5a895ec6: Link UP Jul 15 11:32:17.987484 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid0a5a895ec6: link becomes ready Jul 15 11:32:17.986926 systemd-networkd[1032]: calid0a5a895ec6: Gained carrier Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.820 [INFO][4225] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--v87x5-eth0 coredns-674b8bbfcf- kube-system c9724c60-b989-4af1-8667-515bc34b0af7 1052 0 2025-07-15 11:31:37 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-v87x5 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calid0a5a895ec6 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Namespace="kube-system" Pod="coredns-674b8bbfcf-v87x5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v87x5-" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.820 [INFO][4225] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Namespace="kube-system" Pod="coredns-674b8bbfcf-v87x5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.861 [INFO][4274] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" HandleID="k8s-pod-network.e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.861 [INFO][4274] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" HandleID="k8s-pod-network.e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00035f5f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-v87x5", "timestamp":"2025-07-15 11:32:17.861538809 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.862 [INFO][4274] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.871 [INFO][4274] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.871 [INFO][4274] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.943 [INFO][4274] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" host="localhost" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.950 [INFO][4274] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.958 [INFO][4274] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.959 [INFO][4274] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.962 [INFO][4274] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.962 [INFO][4274] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" host="localhost" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.963 [INFO][4274] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881 Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.966 [INFO][4274] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" host="localhost" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.973 [INFO][4274] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" host="localhost" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.973 [INFO][4274] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" host="localhost" Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.973 [INFO][4274] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:18.001324 env[1210]: 2025-07-15 11:32:17.973 [INFO][4274] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" HandleID="k8s-pod-network.e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:18.002203 env[1210]: 2025-07-15 11:32:17.980 [INFO][4225] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Namespace="kube-system" Pod="coredns-674b8bbfcf-v87x5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--v87x5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"c9724c60-b989-4af1-8667-515bc34b0af7", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-v87x5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid0a5a895ec6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:18.002203 env[1210]: 2025-07-15 11:32:17.980 [INFO][4225] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Namespace="kube-system" Pod="coredns-674b8bbfcf-v87x5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:18.002203 env[1210]: 2025-07-15 11:32:17.980 [INFO][4225] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid0a5a895ec6 ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Namespace="kube-system" Pod="coredns-674b8bbfcf-v87x5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:18.002203 env[1210]: 2025-07-15 11:32:17.988 [INFO][4225] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Namespace="kube-system" Pod="coredns-674b8bbfcf-v87x5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:18.002203 env[1210]: 2025-07-15 11:32:17.989 [INFO][4225] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Namespace="kube-system" Pod="coredns-674b8bbfcf-v87x5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--v87x5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"c9724c60-b989-4af1-8667-515bc34b0af7", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881", Pod:"coredns-674b8bbfcf-v87x5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid0a5a895ec6", MAC:"c6:09:f7:31:bf:1a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:18.002203 env[1210]: 2025-07-15 11:32:17.997 [INFO][4225] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881" Namespace="kube-system" Pod="coredns-674b8bbfcf-v87x5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:18.007000 audit[4360]: NETFILTER_CFG table=filter:115 family=2 entries=44 op=nft_register_chain pid=4360 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:18.007000 audit[4360]: SYSCALL arch=c000003e syscall=46 success=yes exit=21516 a0=3 a1=7ffe6d25cfb0 a2=0 a3=7ffe6d25cf9c items=0 ppid=3387 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.007000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:18.012273 env[1210]: time="2025-07-15T11:32:18.012206837Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:18.012273 env[1210]: time="2025-07-15T11:32:18.012250118Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:18.012409 env[1210]: time="2025-07-15T11:32:18.012261038Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:18.012824 env[1210]: time="2025-07-15T11:32:18.012737092Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881 pid=4368 runtime=io.containerd.runc.v2 Jul 15 11:32:18.023973 systemd[1]: Started cri-containerd-e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881.scope. Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.034000 audit: BPF prog-id=190 op=LOAD Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4368 pid=4378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539616465616539383530353831396534356331323562623439306236 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4368 pid=4378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539616465616539383530353831396534356331323562623439306236 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit: BPF prog-id=191 op=LOAD Jul 15 11:32:18.035000 audit[4378]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001b0750 items=0 ppid=4368 pid=4378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539616465616539383530353831396534356331323562623439306236 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit: BPF prog-id=192 op=LOAD Jul 15 11:32:18.035000 audit[4378]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001b0798 items=0 ppid=4368 pid=4378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539616465616539383530353831396534356331323562623439306236 Jul 15 11:32:18.035000 audit: BPF prog-id=192 op=UNLOAD Jul 15 11:32:18.035000 audit: BPF prog-id=191 op=UNLOAD Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { perfmon } for pid=4378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit[4378]: AVC avc: denied { bpf } for pid=4378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.035000 audit: BPF prog-id=193 op=LOAD Jul 15 11:32:18.035000 audit[4378]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001b0ba8 items=0 ppid=4368 pid=4378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539616465616539383530353831396534356331323562623439306236 Jul 15 11:32:18.037504 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:32:18.072499 env[1210]: time="2025-07-15T11:32:18.072441081Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-v87x5,Uid:c9724c60-b989-4af1-8667-515bc34b0af7,Namespace:kube-system,Attempt:1,} returns sandbox id \"e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881\"" Jul 15 11:32:18.073095 kubelet[1964]: E0715 11:32:18.073058 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:18.079691 env[1210]: time="2025-07-15T11:32:18.079652374Z" level=info msg="CreateContainer within sandbox \"e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:32:18.099512 systemd-networkd[1032]: cali954519c1c16: Link UP Jul 15 11:32:18.101402 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali954519c1c16: link becomes ready Jul 15 11:32:18.101174 systemd-networkd[1032]: cali954519c1c16: Gained carrier Jul 15 11:32:18.157277 systemd-networkd[1032]: cali7ea4b3ef3d4: Gained IPv6LL Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:17.833 [INFO][4240] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0 calico-kube-controllers-6d6d5bf84f- calico-system 6ed339ad-27b3-4a4b-aac6-c54676ad507d 1053 0 2025-07-15 11:31:49 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6d6d5bf84f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6d6d5bf84f-kwsqq eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali954519c1c16 [] [] }} ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Namespace="calico-system" Pod="calico-kube-controllers-6d6d5bf84f-kwsqq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:17.834 [INFO][4240] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Namespace="calico-system" Pod="calico-kube-controllers-6d6d5bf84f-kwsqq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:17.865 [INFO][4283] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" HandleID="k8s-pod-network.564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:17.866 [INFO][4283] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" HandleID="k8s-pod-network.564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000123720), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6d6d5bf84f-kwsqq", "timestamp":"2025-07-15 11:32:17.86034557 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:17.866 [INFO][4283] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:17.973 [INFO][4283] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:17.973 [INFO][4283] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.044 [INFO][4283] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" host="localhost" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.051 [INFO][4283] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.059 [INFO][4283] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.060 [INFO][4283] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.064 [INFO][4283] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.064 [INFO][4283] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" host="localhost" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.067 [INFO][4283] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.078 [INFO][4283] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" host="localhost" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.085 [INFO][4283] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" host="localhost" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.085 [INFO][4283] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" host="localhost" Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.085 [INFO][4283] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:18.361876 env[1210]: 2025-07-15 11:32:18.085 [INFO][4283] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" HandleID="k8s-pod-network.564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:18.362689 env[1210]: 2025-07-15 11:32:18.093 [INFO][4240] cni-plugin/k8s.go 418: Populated endpoint ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Namespace="calico-system" Pod="calico-kube-controllers-6d6d5bf84f-kwsqq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0", GenerateName:"calico-kube-controllers-6d6d5bf84f-", Namespace:"calico-system", SelfLink:"", UID:"6ed339ad-27b3-4a4b-aac6-c54676ad507d", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6d6d5bf84f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6d6d5bf84f-kwsqq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali954519c1c16", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:18.362689 env[1210]: 2025-07-15 11:32:18.093 [INFO][4240] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Namespace="calico-system" Pod="calico-kube-controllers-6d6d5bf84f-kwsqq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:18.362689 env[1210]: 2025-07-15 11:32:18.093 [INFO][4240] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali954519c1c16 ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Namespace="calico-system" Pod="calico-kube-controllers-6d6d5bf84f-kwsqq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:18.362689 env[1210]: 2025-07-15 11:32:18.102 [INFO][4240] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Namespace="calico-system" Pod="calico-kube-controllers-6d6d5bf84f-kwsqq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:18.362689 env[1210]: 2025-07-15 11:32:18.103 [INFO][4240] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Namespace="calico-system" Pod="calico-kube-controllers-6d6d5bf84f-kwsqq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0", GenerateName:"calico-kube-controllers-6d6d5bf84f-", Namespace:"calico-system", SelfLink:"", UID:"6ed339ad-27b3-4a4b-aac6-c54676ad507d", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6d6d5bf84f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd", Pod:"calico-kube-controllers-6d6d5bf84f-kwsqq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali954519c1c16", MAC:"96:8e:84:e1:44:0b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:18.362689 env[1210]: 2025-07-15 11:32:18.359 [INFO][4240] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd" Namespace="calico-system" Pod="calico-kube-controllers-6d6d5bf84f-kwsqq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:18.393000 audit[4412]: NETFILTER_CFG table=filter:116 family=2 entries=52 op=nft_register_chain pid=4412 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:18.393000 audit[4412]: SYSCALL arch=c000003e syscall=46 success=yes exit=24312 a0=3 a1=7ffc6d94c730 a2=0 a3=7ffc6d94c71c items=0 ppid=3387 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.393000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:18.594311 kubelet[1964]: E0715 11:32:18.594272 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:18.623438 env[1210]: time="2025-07-15T11:32:18.623250396Z" level=info msg="CreateContainer within sandbox \"e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"aa4eae8d88db5e6c1ac5ef968d315544bb9e7724e28f71593f49c6a5cceb52f5\"" Jul 15 11:32:18.624009 env[1210]: time="2025-07-15T11:32:18.623973644Z" level=info msg="StartContainer for \"aa4eae8d88db5e6c1ac5ef968d315544bb9e7724e28f71593f49c6a5cceb52f5\"" Jul 15 11:32:18.636278 env[1210]: time="2025-07-15T11:32:18.636197452Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:18.636511 env[1210]: time="2025-07-15T11:32:18.636477368Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:18.636629 env[1210]: time="2025-07-15T11:32:18.636597563Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:18.636889 env[1210]: time="2025-07-15T11:32:18.636857151Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd pid=4427 runtime=io.containerd.runc.v2 Jul 15 11:32:18.651879 systemd[1]: Started cri-containerd-aa4eae8d88db5e6c1ac5ef968d315544bb9e7724e28f71593f49c6a5cceb52f5.scope. Jul 15 11:32:18.665720 systemd-networkd[1032]: cali94621fdb955: Link UP Jul 15 11:32:18.668588 systemd-networkd[1032]: cali94621fdb955: Gained carrier Jul 15 11:32:18.669254 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali94621fdb955: link becomes ready Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.677000 audit: BPF prog-id=194 op=LOAD Jul 15 11:32:18.684000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.684000 audit[4437]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4368 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161346561653864383864623565366331616335656639363864333135 Jul 15 11:32:18.694000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.694000 audit[4437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=4368 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161346561653864383864623565366331616335656639363864333135 Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:17.831 [INFO][4219] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0 goldmane-768f4c5c69- calico-system 1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c 1054 0 2025-07-15 11:31:48 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-qw2q7 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali94621fdb955 [] [] }} ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Namespace="calico-system" Pod="goldmane-768f4c5c69-qw2q7" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qw2q7-" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:17.831 [INFO][4219] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Namespace="calico-system" Pod="goldmane-768f4c5c69-qw2q7" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:17.915 [INFO][4282] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" HandleID="k8s-pod-network.9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:17.915 [INFO][4282] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" HandleID="k8s-pod-network.9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002dfb80), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-qw2q7", "timestamp":"2025-07-15 11:32:17.915622769 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:17.915 [INFO][4282] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.085 [INFO][4282] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.085 [INFO][4282] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.605 [INFO][4282] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" host="localhost" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.616 [INFO][4282] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.629 [INFO][4282] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.633 [INFO][4282] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.637 [INFO][4282] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.637 [INFO][4282] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" host="localhost" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.640 [INFO][4282] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3 Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.645 [INFO][4282] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" host="localhost" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.653 [INFO][4282] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" host="localhost" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.653 [INFO][4282] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" host="localhost" Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.653 [INFO][4282] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:18.697434 env[1210]: 2025-07-15 11:32:18.653 [INFO][4282] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" HandleID="k8s-pod-network.9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:18.699958 env[1210]: 2025-07-15 11:32:18.656 [INFO][4219] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Namespace="calico-system" Pod="goldmane-768f4c5c69-qw2q7" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-qw2q7", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali94621fdb955", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:18.699958 env[1210]: 2025-07-15 11:32:18.656 [INFO][4219] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Namespace="calico-system" Pod="goldmane-768f4c5c69-qw2q7" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:18.699958 env[1210]: 2025-07-15 11:32:18.656 [INFO][4219] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali94621fdb955 ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Namespace="calico-system" Pod="goldmane-768f4c5c69-qw2q7" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:18.699958 env[1210]: 2025-07-15 11:32:18.672 [INFO][4219] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Namespace="calico-system" Pod="goldmane-768f4c5c69-qw2q7" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:18.699958 env[1210]: 2025-07-15 11:32:18.672 [INFO][4219] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Namespace="calico-system" Pod="goldmane-768f4c5c69-qw2q7" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3", Pod:"goldmane-768f4c5c69-qw2q7", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali94621fdb955", MAC:"b2:1b:28:7a:c1:1b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:18.699958 env[1210]: 2025-07-15 11:32:18.694 [INFO][4219] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3" Namespace="calico-system" Pod="goldmane-768f4c5c69-qw2q7" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:18.695000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.695000 audit: BPF prog-id=195 op=LOAD Jul 15 11:32:18.695000 audit[4437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00011a6e0 items=0 ppid=4368 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161346561653864383864623565366331616335656639363864333135 Jul 15 11:32:18.702893 systemd[1]: Started cri-containerd-564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd.scope. Jul 15 11:32:18.702000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.702000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.702000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.702000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.702000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.702000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.702000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.702000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.702000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.702000 audit: BPF prog-id=196 op=LOAD Jul 15 11:32:18.702000 audit[4437]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000207d98 items=0 ppid=4368 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161346561653864383864623565366331616335656639363864333135 Jul 15 11:32:18.703000 audit: BPF prog-id=196 op=UNLOAD Jul 15 11:32:18.703000 audit: BPF prog-id=195 op=UNLOAD Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.703000 audit: BPF prog-id=197 op=LOAD Jul 15 11:32:18.703000 audit[4437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0002401a8 items=0 ppid=4368 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161346561653864383864623565366331616335656639363864333135 Jul 15 11:32:18.718790 env[1210]: time="2025-07-15T11:32:18.718673755Z" level=info msg="StartContainer for \"aa4eae8d88db5e6c1ac5ef968d315544bb9e7724e28f71593f49c6a5cceb52f5\" returns successfully" Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.721000 audit: BPF prog-id=198 op=LOAD Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4427 pid=4438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536346236636265383533646536613931323031636639346161373735 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4427 pid=4438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536346236636265383533646536613931323031636639346161373735 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit: BPF prog-id=199 op=LOAD Jul 15 11:32:18.722000 audit[4438]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000380f60 items=0 ppid=4427 pid=4438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536346236636265383533646536613931323031636639346161373735 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit: BPF prog-id=200 op=LOAD Jul 15 11:32:18.722000 audit[4438]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000380fa8 items=0 ppid=4427 pid=4438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536346236636265383533646536613931323031636639346161373735 Jul 15 11:32:18.722000 audit: BPF prog-id=200 op=UNLOAD Jul 15 11:32:18.722000 audit: BPF prog-id=199 op=UNLOAD Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { perfmon } for pid=4438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit[4438]: AVC avc: denied { bpf } for pid=4438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.722000 audit: BPF prog-id=201 op=LOAD Jul 15 11:32:18.722000 audit[4438]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003813b8 items=0 ppid=4427 pid=4438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536346236636265383533646536613931323031636639346161373735 Jul 15 11:32:18.727154 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:32:18.742000 audit[4503]: NETFILTER_CFG table=filter:117 family=2 entries=70 op=nft_register_chain pid=4503 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:32:18.742000 audit[4503]: SYSCALL arch=c000003e syscall=46 success=yes exit=33956 a0=3 a1=7fff2713d930 a2=0 a3=7fff2713d91c items=0 ppid=3387 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.742000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:32:18.747196 env[1210]: time="2025-07-15T11:32:18.746094172Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:32:18.747196 env[1210]: time="2025-07-15T11:32:18.746186906Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:32:18.747196 env[1210]: time="2025-07-15T11:32:18.746212814Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:32:18.747589 env[1210]: time="2025-07-15T11:32:18.747539544Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3 pid=4498 runtime=io.containerd.runc.v2 Jul 15 11:32:18.746000 audit[4453]: AVC avc: denied { getattr } for pid=4453 comm="coredns" path="cgroup:[4026532672]" dev="nsfs" ino=4026532672 scontext=system_u:system_r:svirt_lxc_net_t:s0:c241,c420 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:32:18.746000 audit[4453]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a810 a2=c00060d148 a3=0 items=0 ppid=4368 pid=4453 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c241,c420 key=(null) Jul 15 11:32:18.746000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:32:18.775052 systemd[1]: run-containerd-runc-k8s.io-9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3-runc.lGjN4N.mount: Deactivated successfully. Jul 15 11:32:18.777162 systemd[1]: Started cri-containerd-9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3.scope. Jul 15 11:32:18.791568 env[1210]: time="2025-07-15T11:32:18.791499498Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6d6d5bf84f-kwsqq,Uid:6ed339ad-27b3-4a4b-aac6-c54676ad507d,Namespace:calico-system,Attempt:1,} returns sandbox id \"564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd\"" Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.808000 audit: BPF prog-id=202 op=LOAD Jul 15 11:32:18.809000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.809000 audit[4511]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4498 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343462613631336537363031346336333465393263643436653236 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4498 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343462613631336537363031346336333465393263643436653236 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.810000 audit: BPF prog-id=203 op=LOAD Jul 15 11:32:18.810000 audit[4511]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000308520 items=0 ppid=4498 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343462613631336537363031346336333465393263643436653236 Jul 15 11:32:18.811000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.811000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.811000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.811000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.811000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.811000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.811000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.811000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.811000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.811000 audit: BPF prog-id=204 op=LOAD Jul 15 11:32:18.811000 audit[4511]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000308568 items=0 ppid=4498 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343462613631336537363031346336333465393263643436653236 Jul 15 11:32:18.812000 audit: BPF prog-id=204 op=UNLOAD Jul 15 11:32:18.812000 audit: BPF prog-id=203 op=UNLOAD Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:18.812000 audit: BPF prog-id=205 op=LOAD Jul 15 11:32:18.812000 audit[4511]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000308978 items=0 ppid=4498 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:18.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343462613631336537363031346336333465393263643436653236 Jul 15 11:32:18.815366 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:32:18.842531 env[1210]: time="2025-07-15T11:32:18.842480889Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qw2q7,Uid:1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c,Namespace:calico-system,Attempt:1,} returns sandbox id \"9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3\"" Jul 15 11:32:19.373741 systemd-networkd[1032]: cali7318ccfe48d: Gained IPv6LL Jul 15 11:32:19.437394 systemd-networkd[1032]: calid0a5a895ec6: Gained IPv6LL Jul 15 11:32:19.502317 systemd-networkd[1032]: cali954519c1c16: Gained IPv6LL Jul 15 11:32:19.599524 kubelet[1964]: E0715 11:32:19.599208 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:19.765000 audit[4543]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4543 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:19.765000 audit[4543]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd5c210b00 a2=0 a3=7ffd5c210aec items=0 ppid=2078 pid=4543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.765000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:19.768653 kubelet[1964]: I0715 11:32:19.768600 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-v87x5" podStartSLOduration=42.768582917 podStartE2EDuration="42.768582917s" podCreationTimestamp="2025-07-15 11:31:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:32:19.694523287 +0000 UTC m=+47.388811143" watchObservedRunningTime="2025-07-15 11:32:19.768582917 +0000 UTC m=+47.462870763" Jul 15 11:32:19.771000 audit[4543]: NETFILTER_CFG table=nat:119 family=2 entries=46 op=nft_register_rule pid=4543 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:19.771000 audit[4543]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffd5c210b00 a2=0 a3=7ffd5c210aec items=0 ppid=2078 pid=4543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.771000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:19.780004 env[1210]: time="2025-07-15T11:32:19.779938986Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:19.783400 env[1210]: time="2025-07-15T11:32:19.783349916Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:19.785510 env[1210]: time="2025-07-15T11:32:19.785451500Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:19.787598 env[1210]: time="2025-07-15T11:32:19.787550588Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:19.788106 env[1210]: time="2025-07-15T11:32:19.788080693Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:32:19.789881 env[1210]: time="2025-07-15T11:32:19.789857147Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:32:19.791000 audit[4545]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:19.791000 audit[4545]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdcec0b530 a2=0 a3=7ffdcec0b51c items=0 ppid=2078 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.791000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:19.794589 env[1210]: time="2025-07-15T11:32:19.794541356Z" level=info msg="CreateContainer within sandbox \"8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:32:19.808442 env[1210]: time="2025-07-15T11:32:19.808368863Z" level=info msg="CreateContainer within sandbox \"8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ba0a1a768bd5bb7294a4d34c1f463f98fc0f0f29c65848a3ae4cd956e4836277\"" Jul 15 11:32:19.809143 env[1210]: time="2025-07-15T11:32:19.809102220Z" level=info msg="StartContainer for \"ba0a1a768bd5bb7294a4d34c1f463f98fc0f0f29c65848a3ae4cd956e4836277\"" Jul 15 11:32:19.811000 audit[4545]: NETFILTER_CFG table=nat:121 family=2 entries=58 op=nft_register_chain pid=4545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:19.811000 audit[4545]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffdcec0b530 a2=0 a3=7ffdcec0b51c items=0 ppid=2078 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.811000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:19.836508 systemd[1]: Started cri-containerd-ba0a1a768bd5bb7294a4d34c1f463f98fc0f0f29c65848a3ae4cd956e4836277.scope. Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.848000 audit: BPF prog-id=206 op=LOAD Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3833 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261306131613736386264356262373239346134643334633166343633 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3833 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261306131613736386264356262373239346134643334633166343633 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit: BPF prog-id=207 op=LOAD Jul 15 11:32:19.849000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001f05d0 items=0 ppid=3833 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261306131613736386264356262373239346134643334633166343633 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit: BPF prog-id=208 op=LOAD Jul 15 11:32:19.849000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001f0618 items=0 ppid=3833 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261306131613736386264356262373239346134643334633166343633 Jul 15 11:32:19.849000 audit: BPF prog-id=208 op=UNLOAD Jul 15 11:32:19.849000 audit: BPF prog-id=207 op=UNLOAD Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:19.849000 audit: BPF prog-id=209 op=LOAD Jul 15 11:32:19.849000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0001f0a28 items=0 ppid=3833 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:19.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261306131613736386264356262373239346134643334633166343633 Jul 15 11:32:19.881144 env[1210]: time="2025-07-15T11:32:19.881077046Z" level=info msg="StartContainer for \"ba0a1a768bd5bb7294a4d34c1f463f98fc0f0f29c65848a3ae4cd956e4836277\" returns successfully" Jul 15 11:32:20.013285 systemd-networkd[1032]: cali94621fdb955: Gained IPv6LL Jul 15 11:32:20.603987 kubelet[1964]: E0715 11:32:20.603949 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:20.613955 kubelet[1964]: I0715 11:32:20.613900 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6ffb65f685-f9jbv" podStartSLOduration=31.539374103 podStartE2EDuration="35.613885219s" podCreationTimestamp="2025-07-15 11:31:45 +0000 UTC" firstStartedPulling="2025-07-15 11:32:15.714823641 +0000 UTC m=+43.409111487" lastFinishedPulling="2025-07-15 11:32:19.789334757 +0000 UTC m=+47.483622603" observedRunningTime="2025-07-15 11:32:20.61315058 +0000 UTC m=+48.307438427" watchObservedRunningTime="2025-07-15 11:32:20.613885219 +0000 UTC m=+48.308173065" Jul 15 11:32:20.682165 kernel: kauditd_printk_skb: 619 callbacks suppressed Jul 15 11:32:20.682506 kernel: audit: type=1400 audit(1752579140.677:1395): avc: denied { watch } for pid=4566 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_32_01.2215388364/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c965 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c288,c965 tclass=file permissive=0 Jul 15 11:32:20.677000 audit[4566]: AVC avc: denied { watch } for pid=4566 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_32_01.2215388364/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c965 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c288,c965 tclass=file permissive=0 Jul 15 11:32:20.677000 audit[4566]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f5e1e0 a2=fc6 a3=0 items=0 ppid=3833 pid=4566 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c965 key=(null) Jul 15 11:32:20.689263 kernel: audit: type=1300 audit(1752579140.677:1395): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f5e1e0 a2=fc6 a3=0 items=0 ppid=3833 pid=4566 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c965 key=(null) Jul 15 11:32:20.689418 kernel: audit: type=1327 audit(1752579140.677:1395): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:32:20.677000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:32:20.827000 audit[4596]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4596 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:20.827000 audit[4596]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe7f198970 a2=0 a3=7ffe7f19895c items=0 ppid=2078 pid=4596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:20.835942 kernel: audit: type=1325 audit(1752579140.827:1396): table=filter:122 family=2 entries=12 op=nft_register_rule pid=4596 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:20.835992 kernel: audit: type=1300 audit(1752579140.827:1396): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe7f198970 a2=0 a3=7ffe7f19895c items=0 ppid=2078 pid=4596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:20.836018 kernel: audit: type=1327 audit(1752579140.827:1396): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:20.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:20.838000 audit[4596]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=4596 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:20.838000 audit[4596]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe7f198970 a2=0 a3=7ffe7f19895c items=0 ppid=2078 pid=4596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:20.846517 kernel: audit: type=1325 audit(1752579140.838:1397): table=nat:123 family=2 entries=22 op=nft_register_rule pid=4596 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:20.846566 kernel: audit: type=1300 audit(1752579140.838:1397): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe7f198970 a2=0 a3=7ffe7f19895c items=0 ppid=2078 pid=4596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:20.846592 kernel: audit: type=1327 audit(1752579140.838:1397): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:20.838000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:21.280931 systemd[1]: Started sshd@10-10.0.0.76:22-10.0.0.1:59874.service. Jul 15 11:32:21.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.76:22-10.0.0.1:59874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.285160 kernel: audit: type=1130 audit(1752579141.279:1398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.76:22-10.0.0.1:59874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.490000 audit[4598]: USER_ACCT pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.491659 sshd[4598]: Accepted publickey for core from 10.0.0.1 port 59874 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:21.491000 audit[4598]: CRED_ACQ pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.491000 audit[4598]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9957b2e0 a2=3 a3=0 items=0 ppid=1 pid=4598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:21.491000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:21.492985 sshd[4598]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:21.498528 systemd[1]: Started session-11.scope. Jul 15 11:32:21.499656 systemd-logind[1201]: New session 11 of user core. Jul 15 11:32:21.504000 audit[4598]: USER_START pid=4598 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.505000 audit[4600]: CRED_ACQ pid=4600 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.605914 kubelet[1964]: E0715 11:32:21.605802 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:21.605914 kubelet[1964]: I0715 11:32:21.605901 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:32:21.634488 env[1210]: time="2025-07-15T11:32:21.631894444Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:21.634488 env[1210]: time="2025-07-15T11:32:21.633247222Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:21.634911 env[1210]: time="2025-07-15T11:32:21.634881679Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:21.636270 env[1210]: time="2025-07-15T11:32:21.636236541Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:21.636654 env[1210]: time="2025-07-15T11:32:21.636616384Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 15 11:32:21.637888 env[1210]: time="2025-07-15T11:32:21.637788983Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:32:21.642017 env[1210]: time="2025-07-15T11:32:21.641972713Z" level=info msg="CreateContainer within sandbox \"e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:32:21.658150 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount783615224.mount: Deactivated successfully. Jul 15 11:32:21.660877 env[1210]: time="2025-07-15T11:32:21.660835875Z" level=info msg="CreateContainer within sandbox \"e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"7cfd2ca4db7a32309a2af8543fb56aec9dee89fe6d75da818daf510d1ce0dae7\"" Jul 15 11:32:21.662410 env[1210]: time="2025-07-15T11:32:21.662366387Z" level=info msg="StartContainer for \"7cfd2ca4db7a32309a2af8543fb56aec9dee89fe6d75da818daf510d1ce0dae7\"" Jul 15 11:32:21.687381 systemd[1]: Started cri-containerd-7cfd2ca4db7a32309a2af8543fb56aec9dee89fe6d75da818daf510d1ce0dae7.scope. Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7efd3400c838 items=0 ppid=4059 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:21.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763666432636134646237613332333039613261663835343366623536 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit: BPF prog-id=210 op=LOAD Jul 15 11:32:21.701000 audit[4617]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c000286f68 items=0 ppid=4059 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:21.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763666432636134646237613332333039613261663835343366623536 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit: BPF prog-id=211 op=LOAD Jul 15 11:32:21.701000 audit[4617]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c000286fb8 items=0 ppid=4059 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:21.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763666432636134646237613332333039613261663835343366623536 Jul 15 11:32:21.701000 audit: BPF prog-id=211 op=UNLOAD Jul 15 11:32:21.701000 audit: BPF prog-id=210 op=UNLOAD Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:21.701000 audit: BPF prog-id=212 op=LOAD Jul 15 11:32:21.701000 audit[4617]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c000287048 items=0 ppid=4059 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:21.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763666432636134646237613332333039613261663835343366623536 Jul 15 11:32:21.713784 sshd[4598]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:21.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.76:22-10.0.0.1:59880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.716615 systemd[1]: Started sshd@11-10.0.0.76:22-10.0.0.1:59880.service. Jul 15 11:32:21.716000 audit[4598]: USER_END pid=4598 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.716000 audit[4598]: CRED_DISP pid=4598 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.719746 systemd-logind[1201]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:32:21.720314 systemd[1]: sshd@10-10.0.0.76:22-10.0.0.1:59874.service: Deactivated successfully. Jul 15 11:32:21.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.76:22-10.0.0.1:59874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.720898 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:32:21.721745 systemd-logind[1201]: Removed session 11. Jul 15 11:32:21.777795 env[1210]: time="2025-07-15T11:32:21.777727652Z" level=info msg="StartContainer for \"7cfd2ca4db7a32309a2af8543fb56aec9dee89fe6d75da818daf510d1ce0dae7\" returns successfully" Jul 15 11:32:21.812000 audit[4647]: USER_ACCT pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.814340 sshd[4647]: Accepted publickey for core from 10.0.0.1 port 59880 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:21.813000 audit[4647]: CRED_ACQ pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.813000 audit[4647]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2e6887d0 a2=3 a3=0 items=0 ppid=1 pid=4647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:21.813000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:21.815384 sshd[4647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:21.819087 systemd-logind[1201]: New session 12 of user core. Jul 15 11:32:21.819934 systemd[1]: Started session-12.scope. Jul 15 11:32:21.823000 audit[4647]: USER_START pid=4647 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.824000 audit[4650]: CRED_ACQ pid=4650 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.959277 sshd[4647]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:21.963000 audit[4647]: USER_END pid=4647 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.964000 audit[4647]: CRED_DISP pid=4647 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:21.965862 systemd[1]: Started sshd@12-10.0.0.76:22-10.0.0.1:59888.service. Jul 15 11:32:21.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.76:22-10.0.0.1:59888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.972197 systemd[1]: sshd@11-10.0.0.76:22-10.0.0.1:59880.service: Deactivated successfully. Jul 15 11:32:21.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.76:22-10.0.0.1:59880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:21.973198 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:32:21.973983 systemd-logind[1201]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:32:21.974922 systemd-logind[1201]: Removed session 12. Jul 15 11:32:22.005000 audit[4659]: USER_ACCT pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:22.006887 sshd[4659]: Accepted publickey for core from 10.0.0.1 port 59888 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:22.006000 audit[4659]: CRED_ACQ pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:22.006000 audit[4659]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6fc83030 a2=3 a3=0 items=0 ppid=1 pid=4659 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:22.006000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:22.008030 sshd[4659]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:22.011713 systemd-logind[1201]: New session 13 of user core. Jul 15 11:32:22.012487 systemd[1]: Started session-13.scope. Jul 15 11:32:22.015000 audit[4659]: USER_START pid=4659 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:22.016000 audit[4662]: CRED_ACQ pid=4662 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:22.039246 env[1210]: time="2025-07-15T11:32:22.039183611Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:22.041271 env[1210]: time="2025-07-15T11:32:22.041239748Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:22.043116 env[1210]: time="2025-07-15T11:32:22.043087575Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:22.044694 env[1210]: time="2025-07-15T11:32:22.044657540Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:22.045101 env[1210]: time="2025-07-15T11:32:22.045075305Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:32:22.046234 env[1210]: time="2025-07-15T11:32:22.046202169Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:32:22.050087 env[1210]: time="2025-07-15T11:32:22.050055548Z" level=info msg="CreateContainer within sandbox \"32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:32:22.068873 env[1210]: time="2025-07-15T11:32:22.068817337Z" level=info msg="CreateContainer within sandbox \"32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"cced3cc6269753ce053009f9d69d5d5d492ae51b9f3623064d369a5c85955009\"" Jul 15 11:32:22.069609 env[1210]: time="2025-07-15T11:32:22.069576072Z" level=info msg="StartContainer for \"cced3cc6269753ce053009f9d69d5d5d492ae51b9f3623064d369a5c85955009\"" Jul 15 11:32:22.085416 systemd[1]: Started cri-containerd-cced3cc6269753ce053009f9d69d5d5d492ae51b9f3623064d369a5c85955009.scope. Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.096000 audit: BPF prog-id=213 op=LOAD Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4316 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:22.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363656433636336323639373533636530353330303966396436396435 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4316 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:22.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363656433636336323639373533636530353330303966396436396435 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit: BPF prog-id=214 op=LOAD Jul 15 11:32:22.097000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002850b0 items=0 ppid=4316 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:22.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363656433636336323639373533636530353330303966396436396435 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit: BPF prog-id=215 op=LOAD Jul 15 11:32:22.097000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002850f8 items=0 ppid=4316 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:22.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363656433636336323639373533636530353330303966396436396435 Jul 15 11:32:22.097000 audit: BPF prog-id=215 op=UNLOAD Jul 15 11:32:22.097000 audit: BPF prog-id=214 op=UNLOAD Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:22.097000 audit: BPF prog-id=216 op=LOAD Jul 15 11:32:22.097000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000285508 items=0 ppid=4316 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:22.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363656433636336323639373533636530353330303966396436396435 Jul 15 11:32:22.124778 env[1210]: time="2025-07-15T11:32:22.124700051Z" level=info msg="StartContainer for \"cced3cc6269753ce053009f9d69d5d5d492ae51b9f3623064d369a5c85955009\" returns successfully" Jul 15 11:32:22.126817 sshd[4659]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:22.127000 audit[4659]: USER_END pid=4659 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:22.127000 audit[4659]: CRED_DISP pid=4659 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:22.130260 systemd-logind[1201]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:32:22.131484 systemd[1]: sshd@12-10.0.0.76:22-10.0.0.1:59888.service: Deactivated successfully. Jul 15 11:32:22.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.76:22-10.0.0.1:59888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.132188 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:32:22.133512 systemd-logind[1201]: Removed session 13. Jul 15 11:32:23.148000 audit[4713]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:23.148000 audit[4713]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffeaaede6e0 a2=0 a3=7ffeaaede6cc items=0 ppid=2078 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:23.148000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:23.154000 audit[4713]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:23.154000 audit[4713]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffeaaede6e0 a2=0 a3=7ffeaaede6cc items=0 ppid=2078 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:23.154000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:23.612805 kubelet[1964]: I0715 11:32:23.612773 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:32:23.834000 audit[4689]: AVC avc: denied { watch } for pid=4689 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_32_01.1717976422/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c938 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c0,c938 tclass=file permissive=0 Jul 15 11:32:23.834000 audit[4689]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f960c0 a2=fc6 a3=0 items=0 ppid=4316 pid=4689 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c0,c938 key=(null) Jul 15 11:32:23.834000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:32:25.464873 env[1210]: time="2025-07-15T11:32:25.464812550Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:25.467482 env[1210]: time="2025-07-15T11:32:25.467422896Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:25.469155 env[1210]: time="2025-07-15T11:32:25.469118797Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:25.470701 env[1210]: time="2025-07-15T11:32:25.470665459Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:25.471065 env[1210]: time="2025-07-15T11:32:25.471038058Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 15 11:32:25.472074 env[1210]: time="2025-07-15T11:32:25.472041961Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:32:25.486439 env[1210]: time="2025-07-15T11:32:25.486384597Z" level=info msg="CreateContainer within sandbox \"564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:32:25.504869 env[1210]: time="2025-07-15T11:32:25.504811282Z" level=info msg="CreateContainer within sandbox \"564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"ce2f3eba14befd66a0babf1a923bef2630419e8dd42c3b852aa2fc7d2d641a11\"" Jul 15 11:32:25.505330 env[1210]: time="2025-07-15T11:32:25.505303526Z" level=info msg="StartContainer for \"ce2f3eba14befd66a0babf1a923bef2630419e8dd42c3b852aa2fc7d2d641a11\"" Jul 15 11:32:25.524490 systemd[1]: Started cri-containerd-ce2f3eba14befd66a0babf1a923bef2630419e8dd42c3b852aa2fc7d2d641a11.scope. Jul 15 11:32:25.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit: BPF prog-id=217 op=LOAD Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000119c48 a2=10 a3=1c items=0 ppid=4427 pid=4726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:25.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365326633656261313462656664363661306261626631613932336265 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001196b0 a2=3c a3=8 items=0 ppid=4427 pid=4726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:25.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365326633656261313462656664363661306261626631613932336265 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit: BPF prog-id=218 op=LOAD Jul 15 11:32:25.536000 audit[4726]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001199d8 a2=78 a3=c00039d4e0 items=0 ppid=4427 pid=4726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:25.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365326633656261313462656664363661306261626631613932336265 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit: BPF prog-id=219 op=LOAD Jul 15 11:32:25.536000 audit[4726]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000119770 a2=78 a3=c00039d528 items=0 ppid=4427 pid=4726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:25.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365326633656261313462656664363661306261626631613932336265 Jul 15 11:32:25.536000 audit: BPF prog-id=219 op=UNLOAD Jul 15 11:32:25.536000 audit: BPF prog-id=218 op=UNLOAD Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { perfmon } for pid=4726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit[4726]: AVC avc: denied { bpf } for pid=4726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:25.536000 audit: BPF prog-id=220 op=LOAD Jul 15 11:32:25.536000 audit[4726]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000119c30 a2=78 a3=c00039d938 items=0 ppid=4427 pid=4726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:25.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365326633656261313462656664363661306261626631613932336265 Jul 15 11:32:25.587157 env[1210]: time="2025-07-15T11:32:25.587082663Z" level=info msg="StartContainer for \"ce2f3eba14befd66a0babf1a923bef2630419e8dd42c3b852aa2fc7d2d641a11\" returns successfully" Jul 15 11:32:25.634480 kubelet[1964]: I0715 11:32:25.633865 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6ffb65f685-bdghj" podStartSLOduration=36.574125866 podStartE2EDuration="40.633842157s" podCreationTimestamp="2025-07-15 11:31:45 +0000 UTC" firstStartedPulling="2025-07-15 11:32:17.986294418 +0000 UTC m=+45.680582264" lastFinishedPulling="2025-07-15 11:32:22.046010709 +0000 UTC m=+49.740298555" observedRunningTime="2025-07-15 11:32:22.898335546 +0000 UTC m=+50.592623533" watchObservedRunningTime="2025-07-15 11:32:25.633842157 +0000 UTC m=+53.328130004" Jul 15 11:32:25.634480 kubelet[1964]: I0715 11:32:25.634209 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6d6d5bf84f-kwsqq" podStartSLOduration=29.954814607 podStartE2EDuration="36.634204227s" podCreationTimestamp="2025-07-15 11:31:49 +0000 UTC" firstStartedPulling="2025-07-15 11:32:18.792468106 +0000 UTC m=+46.486755952" lastFinishedPulling="2025-07-15 11:32:25.471857726 +0000 UTC m=+53.166145572" observedRunningTime="2025-07-15 11:32:25.633817922 +0000 UTC m=+53.328105768" watchObservedRunningTime="2025-07-15 11:32:25.634204227 +0000 UTC m=+53.328492073" Jul 15 11:32:26.627355 kubelet[1964]: I0715 11:32:26.627312 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:32:27.131693 systemd[1]: Started sshd@13-10.0.0.76:22-10.0.0.1:59900.service. Jul 15 11:32:27.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.76:22-10.0.0.1:59900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.132715 kernel: kauditd_printk_skb: 198 callbacks suppressed Jul 15 11:32:27.132784 kernel: audit: type=1130 audit(1752579147.130:1470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.76:22-10.0.0.1:59900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.225000 audit[4770]: USER_ACCT pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.226682 sshd[4770]: Accepted publickey for core from 10.0.0.1 port 59900 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:27.228783 sshd[4770]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:27.227000 audit[4770]: CRED_ACQ pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.237726 kernel: audit: type=1101 audit(1752579147.225:1471): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.237888 kernel: audit: type=1103 audit(1752579147.227:1472): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.237911 kernel: audit: type=1006 audit(1752579147.227:1473): pid=4770 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 15 11:32:27.234018 systemd[1]: Started session-14.scope. Jul 15 11:32:27.234356 systemd-logind[1201]: New session 14 of user core. Jul 15 11:32:27.227000 audit[4770]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddf7f3d20 a2=3 a3=0 items=0 ppid=1 pid=4770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:27.242514 kernel: audit: type=1300 audit(1752579147.227:1473): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddf7f3d20 a2=3 a3=0 items=0 ppid=1 pid=4770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:27.227000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:27.243924 kernel: audit: type=1327 audit(1752579147.227:1473): proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:27.243967 kernel: audit: type=1105 audit(1752579147.238:1474): pid=4770 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.238000 audit[4770]: USER_START pid=4770 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.240000 audit[4772]: CRED_ACQ pid=4772 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.251220 kernel: audit: type=1103 audit(1752579147.240:1475): pid=4772 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.471303 sshd[4770]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:27.471000 audit[4770]: USER_END pid=4770 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.473857 systemd[1]: sshd@13-10.0.0.76:22-10.0.0.1:59900.service: Deactivated successfully. Jul 15 11:32:27.474634 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:32:27.475110 systemd-logind[1201]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:32:27.475863 systemd-logind[1201]: Removed session 14. Jul 15 11:32:27.471000 audit[4770]: CRED_DISP pid=4770 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.478311 kernel: audit: type=1106 audit(1752579147.471:1476): pid=4770 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.478353 kernel: audit: type=1104 audit(1752579147.471:1477): pid=4770 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:27.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.76:22-10.0.0.1:59900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:27.881020 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1992738916.mount: Deactivated successfully. Jul 15 11:32:28.193000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:28.193000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:28.193000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:28.193000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:28.193000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c005b11200 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:32:28.193000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c010fc3800 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:32:28.193000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c009a0dba0 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:32:28.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:28.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:28.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:28.193000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c007a2ca20 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:32:28.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:28.194000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:28.194000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00a5c4750 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:32:28.194000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:28.194000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6721 scontext=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:28.194000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c006452960 a2=fc6 a3=0 items=0 ppid=1684 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c125,c226 key=(null) Jul 15 11:32:28.194000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:32:28.222000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:28.222000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:28.222000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b489c0 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:32:28.222000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:28.222000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009e9180 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:32:28.222000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:28.562308 kubelet[1964]: I0715 11:32:28.562186 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:32:30.349152 env[1210]: time="2025-07-15T11:32:30.349071049Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:30.351986 env[1210]: time="2025-07-15T11:32:30.351935081Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:30.354231 env[1210]: time="2025-07-15T11:32:30.354196853Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:30.356352 env[1210]: time="2025-07-15T11:32:30.356312250Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:30.357101 env[1210]: time="2025-07-15T11:32:30.357068278Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 15 11:32:30.358292 env[1210]: time="2025-07-15T11:32:30.358265223Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:32:30.389627 env[1210]: time="2025-07-15T11:32:30.389557924Z" level=info msg="CreateContainer within sandbox \"9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:32:30.404013 env[1210]: time="2025-07-15T11:32:30.403960606Z" level=info msg="CreateContainer within sandbox \"9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"ca5afb7df5db8457271470629160e7ac32700d15c2bd006348a124964c581c33\"" Jul 15 11:32:30.405769 env[1210]: time="2025-07-15T11:32:30.404749847Z" level=info msg="StartContainer for \"ca5afb7df5db8457271470629160e7ac32700d15c2bd006348a124964c581c33\"" Jul 15 11:32:30.425238 systemd[1]: Started cri-containerd-ca5afb7df5db8457271470629160e7ac32700d15c2bd006348a124964c581c33.scope. Jul 15 11:32:30.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.441000 audit: BPF prog-id=221 op=LOAD Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=4498 pid=4835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356166623764663564623834353732373134373036323931363065 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001996b0 a2=3c a3=8 items=0 ppid=4498 pid=4835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356166623764663564623834353732373134373036323931363065 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit: BPF prog-id=222 op=LOAD Jul 15 11:32:30.442000 audit[4835]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001999d8 a2=78 a3=c0000edd90 items=0 ppid=4498 pid=4835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356166623764663564623834353732373134373036323931363065 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit: BPF prog-id=223 op=LOAD Jul 15 11:32:30.442000 audit[4835]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000199770 a2=78 a3=c0000eddd8 items=0 ppid=4498 pid=4835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356166623764663564623834353732373134373036323931363065 Jul 15 11:32:30.442000 audit: BPF prog-id=223 op=UNLOAD Jul 15 11:32:30.442000 audit: BPF prog-id=222 op=UNLOAD Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { perfmon } for pid=4835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit[4835]: AVC avc: denied { bpf } for pid=4835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:30.442000 audit: BPF prog-id=224 op=LOAD Jul 15 11:32:30.442000 audit[4835]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000199c30 a2=78 a3=c0003cc1e8 items=0 ppid=4498 pid=4835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356166623764663564623834353732373134373036323931363065 Jul 15 11:32:30.580256 env[1210]: time="2025-07-15T11:32:30.580177637Z" level=info msg="StartContainer for \"ca5afb7df5db8457271470629160e7ac32700d15c2bd006348a124964c581c33\" returns successfully" Jul 15 11:32:30.658581 kubelet[1964]: I0715 11:32:30.655787 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-qw2q7" podStartSLOduration=31.141222782 podStartE2EDuration="42.655764243s" podCreationTimestamp="2025-07-15 11:31:48 +0000 UTC" firstStartedPulling="2025-07-15 11:32:18.843617823 +0000 UTC m=+46.537905669" lastFinishedPulling="2025-07-15 11:32:30.358159284 +0000 UTC m=+58.052447130" observedRunningTime="2025-07-15 11:32:30.650823957 +0000 UTC m=+58.345111803" watchObservedRunningTime="2025-07-15 11:32:30.655764243 +0000 UTC m=+58.350052089" Jul 15 11:32:30.671000 audit[4884]: NETFILTER_CFG table=filter:126 family=2 entries=12 op=nft_register_rule pid=4884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:30.671000 audit[4884]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffffb900a40 a2=0 a3=7ffffb900a2c items=0 ppid=2078 pid=4884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.671000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:30.678000 audit[4884]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=4884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:30.678000 audit[4884]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffffb900a40 a2=0 a3=7ffffb900a2c items=0 ppid=2078 pid=4884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.678000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:30.761000 audit[4916]: NETFILTER_CFG table=filter:128 family=2 entries=11 op=nft_register_rule pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:30.761000 audit[4916]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc785612d0 a2=0 a3=7ffc785612bc items=0 ppid=2078 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.761000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:30.765000 audit[4916]: NETFILTER_CFG table=nat:129 family=2 entries=29 op=nft_register_chain pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:30.765000 audit[4916]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffc785612d0 a2=0 a3=7ffc785612bc items=0 ppid=2078 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:30.765000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:32.061956 env[1210]: time="2025-07-15T11:32:32.061884536Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:32.063770 env[1210]: time="2025-07-15T11:32:32.063710721Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:32.065601 env[1210]: time="2025-07-15T11:32:32.065542636Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:32.067379 env[1210]: time="2025-07-15T11:32:32.067349542Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:32:32.067839 env[1210]: time="2025-07-15T11:32:32.067812621Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 15 11:32:32.072637 env[1210]: time="2025-07-15T11:32:32.072607545Z" level=info msg="CreateContainer within sandbox \"e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:32:32.086681 env[1210]: time="2025-07-15T11:32:32.086638884Z" level=info msg="CreateContainer within sandbox \"e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"e77eec6bbb12bc85b806d5a85494fdc025be9357643ef48edb39545755f51f0b\"" Jul 15 11:32:32.087133 env[1210]: time="2025-07-15T11:32:32.087090571Z" level=info msg="StartContainer for \"e77eec6bbb12bc85b806d5a85494fdc025be9357643ef48edb39545755f51f0b\"" Jul 15 11:32:32.108134 systemd[1]: Started cri-containerd-e77eec6bbb12bc85b806d5a85494fdc025be9357643ef48edb39545755f51f0b.scope. Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f14f867a018 items=0 ppid=4059 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:32.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537376565633662626231326263383562383036643561383534393466 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit: BPF prog-id=225 op=LOAD Jul 15 11:32:32.121000 audit[4925]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000382ad8 items=0 ppid=4059 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:32.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537376565633662626231326263383562383036643561383534393466 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit: BPF prog-id=226 op=LOAD Jul 15 11:32:32.121000 audit[4925]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000382b28 items=0 ppid=4059 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:32.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537376565633662626231326263383562383036643561383534393466 Jul 15 11:32:32.121000 audit: BPF prog-id=226 op=UNLOAD Jul 15 11:32:32.121000 audit: BPF prog-id=225 op=UNLOAD Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:32.121000 audit: BPF prog-id=227 op=LOAD Jul 15 11:32:32.121000 audit[4925]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000382bb8 items=0 ppid=4059 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:32.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537376565633662626231326263383562383036643561383534393466 Jul 15 11:32:32.307802 env[1210]: time="2025-07-15T11:32:32.307717962Z" level=info msg="StartContainer for \"e77eec6bbb12bc85b806d5a85494fdc025be9357643ef48edb39545755f51f0b\" returns successfully" Jul 15 11:32:32.447337 env[1210]: time="2025-07-15T11:32:32.447266766Z" level=info msg="StopPodSandbox for \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\"" Jul 15 11:32:32.476408 systemd[1]: Started sshd@14-10.0.0.76:22-10.0.0.1:58544.service. Jul 15 11:32:32.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.76:22-10.0.0.1:58544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:32.477474 kernel: kauditd_printk_skb: 137 callbacks suppressed Jul 15 11:32:32.477541 kernel: audit: type=1130 audit(1752579152.475:1515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.76:22-10.0.0.1:58544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:32.488701 kubelet[1964]: I0715 11:32:32.488640 1964 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:32:32.492542 kubelet[1964]: I0715 11:32:32.492521 1964 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:32:32.526000 audit[4977]: USER_ACCT pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.531387 sshd[4977]: Accepted publickey for core from 10.0.0.1 port 58544 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:32.537839 kernel: audit: type=1101 audit(1752579152.526:1516): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.537869 kernel: audit: type=1103 audit(1752579152.530:1517): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.537897 kernel: audit: type=1006 audit(1752579152.530:1518): pid=4977 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:32:32.530000 audit[4977]: CRED_ACQ pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.532085 sshd[4977]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:32.538919 systemd[1]: Started session-15.scope. Jul 15 11:32:32.530000 audit[4977]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc3b0f060 a2=3 a3=0 items=0 ppid=1 pid=4977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:32.540230 systemd-logind[1201]: New session 15 of user core. Jul 15 11:32:32.530000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:32.544398 kernel: audit: type=1300 audit(1752579152.530:1518): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc3b0f060 a2=3 a3=0 items=0 ppid=1 pid=4977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:32.544447 kernel: audit: type=1327 audit(1752579152.530:1518): proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:32.544000 audit[4977]: USER_START pid=4977 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.544000 audit[4988]: CRED_ACQ pid=4988 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.553440 kernel: audit: type=1105 audit(1752579152.544:1519): pid=4977 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.553625 kernel: audit: type=1103 audit(1752579152.544:1520): pid=4988 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.523 [WARNING][4971] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0", GenerateName:"calico-kube-controllers-6d6d5bf84f-", Namespace:"calico-system", SelfLink:"", UID:"6ed339ad-27b3-4a4b-aac6-c54676ad507d", ResourceVersion:"1162", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6d6d5bf84f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd", Pod:"calico-kube-controllers-6d6d5bf84f-kwsqq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali954519c1c16", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.524 [INFO][4971] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.524 [INFO][4971] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" iface="eth0" netns="" Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.524 [INFO][4971] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.524 [INFO][4971] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.565 [INFO][4983] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" HandleID="k8s-pod-network.8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.565 [INFO][4983] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.565 [INFO][4983] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.572 [WARNING][4983] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" HandleID="k8s-pod-network.8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.572 [INFO][4983] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" HandleID="k8s-pod-network.8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.574 [INFO][4983] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:32.579193 env[1210]: 2025-07-15 11:32:32.577 [INFO][4971] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:32.580195 env[1210]: time="2025-07-15T11:32:32.579634554Z" level=info msg="TearDown network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\" successfully" Jul 15 11:32:32.580195 env[1210]: time="2025-07-15T11:32:32.579667507Z" level=info msg="StopPodSandbox for \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\" returns successfully" Jul 15 11:32:32.580290 env[1210]: time="2025-07-15T11:32:32.580199029Z" level=info msg="RemovePodSandbox for \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\"" Jul 15 11:32:32.580290 env[1210]: time="2025-07-15T11:32:32.580237314Z" level=info msg="Forcibly stopping sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\"" Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.612 [WARNING][5002] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0", GenerateName:"calico-kube-controllers-6d6d5bf84f-", Namespace:"calico-system", SelfLink:"", UID:"6ed339ad-27b3-4a4b-aac6-c54676ad507d", ResourceVersion:"1162", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6d6d5bf84f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"564b6cbe853de6a91201cf94aa775b0dcd96b594b9ee68ba1773c77768f410cd", Pod:"calico-kube-controllers-6d6d5bf84f-kwsqq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali954519c1c16", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.612 [INFO][5002] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.612 [INFO][5002] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" iface="eth0" netns="" Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.612 [INFO][5002] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.612 [INFO][5002] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.634 [INFO][5013] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" HandleID="k8s-pod-network.8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.634 [INFO][5013] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.634 [INFO][5013] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.640 [WARNING][5013] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" HandleID="k8s-pod-network.8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.640 [INFO][5013] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" HandleID="k8s-pod-network.8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Workload="localhost-k8s-calico--kube--controllers--6d6d5bf84f--kwsqq-eth0" Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.641 [INFO][5013] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:32.645787 env[1210]: 2025-07-15 11:32:32.643 [INFO][5002] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853" Jul 15 11:32:32.646417 env[1210]: time="2025-07-15T11:32:32.646337695Z" level=info msg="TearDown network for sandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\" successfully" Jul 15 11:32:32.650229 env[1210]: time="2025-07-15T11:32:32.650189731Z" level=info msg="RemovePodSandbox \"8f2838624714973505956f7a19d761d98c4a99aa3e2039710ebae65a01746853\" returns successfully" Jul 15 11:32:32.651393 env[1210]: time="2025-07-15T11:32:32.651375261Z" level=info msg="StopPodSandbox for \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\"" Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.683 [WARNING][5037] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" WorkloadEndpoint="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.683 [INFO][5037] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.683 [INFO][5037] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" iface="eth0" netns="" Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.683 [INFO][5037] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.683 [INFO][5037] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.702 [INFO][5045] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" HandleID="k8s-pod-network.1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Workload="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.702 [INFO][5045] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.702 [INFO][5045] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.712 [WARNING][5045] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" HandleID="k8s-pod-network.1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Workload="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.712 [INFO][5045] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" HandleID="k8s-pod-network.1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Workload="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.714 [INFO][5045] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:32.718108 env[1210]: 2025-07-15 11:32:32.716 [INFO][5037] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:32.719849 env[1210]: time="2025-07-15T11:32:32.718078834Z" level=info msg="TearDown network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\" successfully" Jul 15 11:32:32.719849 env[1210]: time="2025-07-15T11:32:32.719801787Z" level=info msg="StopPodSandbox for \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\" returns successfully" Jul 15 11:32:32.720611 env[1210]: time="2025-07-15T11:32:32.720323991Z" level=info msg="RemovePodSandbox for \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\"" Jul 15 11:32:32.720611 env[1210]: time="2025-07-15T11:32:32.720352336Z" level=info msg="Forcibly stopping sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\"" Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.755 [WARNING][5063] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" WorkloadEndpoint="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.755 [INFO][5063] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.755 [INFO][5063] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" iface="eth0" netns="" Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.755 [INFO][5063] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.755 [INFO][5063] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.776 [INFO][5071] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" HandleID="k8s-pod-network.1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Workload="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.776 [INFO][5071] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.777 [INFO][5071] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.781 [WARNING][5071] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" HandleID="k8s-pod-network.1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Workload="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.781 [INFO][5071] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" HandleID="k8s-pod-network.1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Workload="localhost-k8s-whisker--5fd9ddd4f6--4858p-eth0" Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.782 [INFO][5071] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:32.785759 env[1210]: 2025-07-15 11:32:32.783 [INFO][5063] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1" Jul 15 11:32:32.786185 env[1210]: time="2025-07-15T11:32:32.785772026Z" level=info msg="TearDown network for sandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\" successfully" Jul 15 11:32:32.789183 env[1210]: time="2025-07-15T11:32:32.789117839Z" level=info msg="RemovePodSandbox \"1fd29737acc5d3540d3b09a6887c702b2bfead790e7d2dd31cd592aa81cf47c1\" returns successfully" Jul 15 11:32:32.789694 env[1210]: time="2025-07-15T11:32:32.789651205Z" level=info msg="StopPodSandbox for \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\"" Jul 15 11:32:32.842691 sshd[4977]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:32.842000 audit[4977]: USER_END pid=4977 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.851161 kernel: audit: type=1106 audit(1752579152.842:1521): pid=4977 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.851300 kernel: audit: type=1104 audit(1752579152.842:1522): pid=4977 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.842000 audit[4977]: CRED_DISP pid=4977 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:32.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.76:22-10.0.0.1:58544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:32.849140 systemd-logind[1201]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:32:32.850351 systemd[1]: sshd@14-10.0.0.76:22-10.0.0.1:58544.service: Deactivated successfully. Jul 15 11:32:32.851075 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:32:32.852376 systemd-logind[1201]: Removed session 15. Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.829 [WARNING][5088] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--v87x5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"c9724c60-b989-4af1-8667-515bc34b0af7", ResourceVersion:"1095", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881", Pod:"coredns-674b8bbfcf-v87x5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid0a5a895ec6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.829 [INFO][5088] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.829 [INFO][5088] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" iface="eth0" netns="" Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.829 [INFO][5088] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.829 [INFO][5088] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.852 [INFO][5097] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" HandleID="k8s-pod-network.4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.852 [INFO][5097] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.852 [INFO][5097] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.857 [WARNING][5097] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" HandleID="k8s-pod-network.4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.857 [INFO][5097] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" HandleID="k8s-pod-network.4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.858 [INFO][5097] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:32.862243 env[1210]: 2025-07-15 11:32:32.860 [INFO][5088] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:32.862750 env[1210]: time="2025-07-15T11:32:32.862266949Z" level=info msg="TearDown network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\" successfully" Jul 15 11:32:32.862750 env[1210]: time="2025-07-15T11:32:32.862297218Z" level=info msg="StopPodSandbox for \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\" returns successfully" Jul 15 11:32:32.862821 env[1210]: time="2025-07-15T11:32:32.862784915Z" level=info msg="RemovePodSandbox for \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\"" Jul 15 11:32:32.862861 env[1210]: time="2025-07-15T11:32:32.862826034Z" level=info msg="Forcibly stopping sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\"" Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.893 [WARNING][5115] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--v87x5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"c9724c60-b989-4af1-8667-515bc34b0af7", ResourceVersion:"1095", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e9adeae98505819e45c125bb490b696b8670ef29b0701a5ddd1aa589029d4881", Pod:"coredns-674b8bbfcf-v87x5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid0a5a895ec6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.894 [INFO][5115] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.894 [INFO][5115] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" iface="eth0" netns="" Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.894 [INFO][5115] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.894 [INFO][5115] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.913 [INFO][5125] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" HandleID="k8s-pod-network.4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.913 [INFO][5125] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.913 [INFO][5125] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.919 [WARNING][5125] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" HandleID="k8s-pod-network.4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.919 [INFO][5125] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" HandleID="k8s-pod-network.4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Workload="localhost-k8s-coredns--674b8bbfcf--v87x5-eth0" Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.921 [INFO][5125] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:32.924868 env[1210]: 2025-07-15 11:32:32.923 [INFO][5115] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf" Jul 15 11:32:32.925401 env[1210]: time="2025-07-15T11:32:32.924894703Z" level=info msg="TearDown network for sandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\" successfully" Jul 15 11:32:32.928363 env[1210]: time="2025-07-15T11:32:32.928328477Z" level=info msg="RemovePodSandbox \"4ba7d2bd822b05734ca0a6bc44190d66fe36e45c7085e0585ff739e13bc39cbf\" returns successfully" Jul 15 11:32:32.928843 env[1210]: time="2025-07-15T11:32:32.928802487Z" level=info msg="StopPodSandbox for \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\"" Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.960 [WARNING][5144] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0", GenerateName:"calico-apiserver-6ffb65f685-", Namespace:"calico-apiserver", SelfLink:"", UID:"08dca42d-99cd-4d6c-a05f-812cbc0e64a4", ResourceVersion:"1109", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffb65f685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558", Pod:"calico-apiserver-6ffb65f685-f9jbv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali60e1ca98698", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.960 [INFO][5144] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.960 [INFO][5144] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" iface="eth0" netns="" Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.960 [INFO][5144] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.960 [INFO][5144] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.979 [INFO][5154] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" HandleID="k8s-pod-network.0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.979 [INFO][5154] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.979 [INFO][5154] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.985 [WARNING][5154] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" HandleID="k8s-pod-network.0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.985 [INFO][5154] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" HandleID="k8s-pod-network.0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.986 [INFO][5154] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:32.990751 env[1210]: 2025-07-15 11:32:32.988 [INFO][5144] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:32.990751 env[1210]: time="2025-07-15T11:32:32.990702207Z" level=info msg="TearDown network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\" successfully" Jul 15 11:32:32.990751 env[1210]: time="2025-07-15T11:32:32.990735872Z" level=info msg="StopPodSandbox for \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\" returns successfully" Jul 15 11:32:32.992735 env[1210]: time="2025-07-15T11:32:32.992693832Z" level=info msg="RemovePodSandbox for \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\"" Jul 15 11:32:32.992886 env[1210]: time="2025-07-15T11:32:32.992734370Z" level=info msg="Forcibly stopping sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\"" Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.021 [WARNING][5173] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0", GenerateName:"calico-apiserver-6ffb65f685-", Namespace:"calico-apiserver", SelfLink:"", UID:"08dca42d-99cd-4d6c-a05f-812cbc0e64a4", ResourceVersion:"1109", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffb65f685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8d5708546a718df68c5b524f97b5ef2dd03438cd582d7caac072f49d2b1d8558", Pod:"calico-apiserver-6ffb65f685-f9jbv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali60e1ca98698", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.021 [INFO][5173] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.021 [INFO][5173] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" iface="eth0" netns="" Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.021 [INFO][5173] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.021 [INFO][5173] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.042 [INFO][5181] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" HandleID="k8s-pod-network.0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.042 [INFO][5181] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.042 [INFO][5181] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.048 [WARNING][5181] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" HandleID="k8s-pod-network.0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.048 [INFO][5181] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" HandleID="k8s-pod-network.0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Workload="localhost-k8s-calico--apiserver--6ffb65f685--f9jbv-eth0" Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.049 [INFO][5181] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:33.053294 env[1210]: 2025-07-15 11:32:33.051 [INFO][5173] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04" Jul 15 11:32:33.053828 env[1210]: time="2025-07-15T11:32:33.053317200Z" level=info msg="TearDown network for sandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\" successfully" Jul 15 11:32:33.056603 env[1210]: time="2025-07-15T11:32:33.056577681Z" level=info msg="RemovePodSandbox \"0abe6599ba19607e4d5c6e07f5db8953075cb7d3dedaddba827663cd85d9ae04\" returns successfully" Jul 15 11:32:33.057093 env[1210]: time="2025-07-15T11:32:33.057061338Z" level=info msg="StopPodSandbox for \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\"" Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.087 [WARNING][5200] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--8kc9f-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d2f1d298-58ec-4a3a-b674-a51540fedfbb", ResourceVersion:"1201", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275", Pod:"csi-node-driver-8kc9f", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7ea4b3ef3d4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.087 [INFO][5200] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.087 [INFO][5200] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" iface="eth0" netns="" Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.087 [INFO][5200] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.087 [INFO][5200] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.105 [INFO][5208] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" HandleID="k8s-pod-network.36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.105 [INFO][5208] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.105 [INFO][5208] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.111 [WARNING][5208] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" HandleID="k8s-pod-network.36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.111 [INFO][5208] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" HandleID="k8s-pod-network.36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.112 [INFO][5208] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:33.116091 env[1210]: 2025-07-15 11:32:33.114 [INFO][5200] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:33.117079 env[1210]: time="2025-07-15T11:32:33.116148392Z" level=info msg="TearDown network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\" successfully" Jul 15 11:32:33.117079 env[1210]: time="2025-07-15T11:32:33.116181797Z" level=info msg="StopPodSandbox for \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\" returns successfully" Jul 15 11:32:33.117079 env[1210]: time="2025-07-15T11:32:33.116725411Z" level=info msg="RemovePodSandbox for \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\"" Jul 15 11:32:33.117079 env[1210]: time="2025-07-15T11:32:33.116759958Z" level=info msg="Forcibly stopping sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\"" Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.145 [WARNING][5226] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--8kc9f-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d2f1d298-58ec-4a3a-b674-a51540fedfbb", ResourceVersion:"1201", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e3eedb4f26d4efbbbf943774016ebbae63b76a351554cd2ef2a30c2dad973275", Pod:"csi-node-driver-8kc9f", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7ea4b3ef3d4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.145 [INFO][5226] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.145 [INFO][5226] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" iface="eth0" netns="" Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.145 [INFO][5226] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.145 [INFO][5226] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.166 [INFO][5236] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" HandleID="k8s-pod-network.36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.167 [INFO][5236] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.167 [INFO][5236] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.174 [WARNING][5236] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" HandleID="k8s-pod-network.36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.174 [INFO][5236] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" HandleID="k8s-pod-network.36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Workload="localhost-k8s-csi--node--driver--8kc9f-eth0" Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.176 [INFO][5236] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:33.181634 env[1210]: 2025-07-15 11:32:33.177 [INFO][5226] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672" Jul 15 11:32:33.182265 env[1210]: time="2025-07-15T11:32:33.181660964Z" level=info msg="TearDown network for sandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\" successfully" Jul 15 11:32:33.243291 env[1210]: time="2025-07-15T11:32:33.243132311Z" level=info msg="RemovePodSandbox \"36f7d6e72c37282bbd6280cf091708245cddc00db5743464baace99971ff6672\" returns successfully" Jul 15 11:32:33.243650 env[1210]: time="2025-07-15T11:32:33.243589877Z" level=info msg="StopPodSandbox for \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\"" Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.286 [WARNING][5252] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c", ResourceVersion:"1186", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3", Pod:"goldmane-768f4c5c69-qw2q7", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali94621fdb955", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.287 [INFO][5252] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.287 [INFO][5252] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" iface="eth0" netns="" Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.287 [INFO][5252] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.287 [INFO][5252] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.307 [INFO][5261] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" HandleID="k8s-pod-network.6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.307 [INFO][5261] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.308 [INFO][5261] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.315 [WARNING][5261] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" HandleID="k8s-pod-network.6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.315 [INFO][5261] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" HandleID="k8s-pod-network.6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.316 [INFO][5261] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:33.322607 env[1210]: 2025-07-15 11:32:33.320 [INFO][5252] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:33.323236 env[1210]: time="2025-07-15T11:32:33.322660564Z" level=info msg="TearDown network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\" successfully" Jul 15 11:32:33.323236 env[1210]: time="2025-07-15T11:32:33.322728186Z" level=info msg="StopPodSandbox for \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\" returns successfully" Jul 15 11:32:33.323760 env[1210]: time="2025-07-15T11:32:33.323694589Z" level=info msg="RemovePodSandbox for \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\"" Jul 15 11:32:33.323938 env[1210]: time="2025-07-15T11:32:33.323744686Z" level=info msg="Forcibly stopping sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\"" Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.359 [WARNING][5280] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"1ba02b75-63a4-49fb-8a4b-fc2ae5ba777c", ResourceVersion:"1186", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9044ba613e76014c634e92cd46e2641712c23832dc8082e653b2e2db02aeecb3", Pod:"goldmane-768f4c5c69-qw2q7", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali94621fdb955", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.359 [INFO][5280] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.359 [INFO][5280] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" iface="eth0" netns="" Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.359 [INFO][5280] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.359 [INFO][5280] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.382 [INFO][5289] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" HandleID="k8s-pod-network.6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.382 [INFO][5289] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.382 [INFO][5289] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.390 [WARNING][5289] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" HandleID="k8s-pod-network.6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.390 [INFO][5289] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" HandleID="k8s-pod-network.6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Workload="localhost-k8s-goldmane--768f4c5c69--qw2q7-eth0" Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.391 [INFO][5289] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:33.395503 env[1210]: 2025-07-15 11:32:33.393 [INFO][5280] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b" Jul 15 11:32:33.395990 env[1210]: time="2025-07-15T11:32:33.395544827Z" level=info msg="TearDown network for sandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\" successfully" Jul 15 11:32:33.399105 env[1210]: time="2025-07-15T11:32:33.399078057Z" level=info msg="RemovePodSandbox \"6c0b64ef8b2578b38399ac7581cd23038c2b75cddf904aee737b93249640c47b\" returns successfully" Jul 15 11:32:33.399584 env[1210]: time="2025-07-15T11:32:33.399564570Z" level=info msg="StopPodSandbox for \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\"" Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.431 [WARNING][5307] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--csjbt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90", Pod:"coredns-674b8bbfcf-csjbt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calied1a9550c22", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.431 [INFO][5307] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.431 [INFO][5307] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" iface="eth0" netns="" Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.431 [INFO][5307] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.431 [INFO][5307] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.453 [INFO][5316] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" HandleID="k8s-pod-network.93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.453 [INFO][5316] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.453 [INFO][5316] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.459 [WARNING][5316] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" HandleID="k8s-pod-network.93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.459 [INFO][5316] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" HandleID="k8s-pod-network.93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.460 [INFO][5316] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:33.464189 env[1210]: 2025-07-15 11:32:33.462 [INFO][5307] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:33.464979 env[1210]: time="2025-07-15T11:32:33.464221283Z" level=info msg="TearDown network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\" successfully" Jul 15 11:32:33.464979 env[1210]: time="2025-07-15T11:32:33.464251672Z" level=info msg="StopPodSandbox for \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\" returns successfully" Jul 15 11:32:33.464979 env[1210]: time="2025-07-15T11:32:33.464778263Z" level=info msg="RemovePodSandbox for \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\"" Jul 15 11:32:33.464979 env[1210]: time="2025-07-15T11:32:33.464814994Z" level=info msg="Forcibly stopping sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\"" Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.494 [WARNING][5333] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--csjbt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"41ea2cb5-2a81-4a97-91f8-b3f0252dcaaf", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff03e698c742092e289a75a9dfad3fd09b67ff255f4ebedccbeb7852fd1a5c90", Pod:"coredns-674b8bbfcf-csjbt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calied1a9550c22", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.494 [INFO][5333] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.494 [INFO][5333] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" iface="eth0" netns="" Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.494 [INFO][5333] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.494 [INFO][5333] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.512 [INFO][5342] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" HandleID="k8s-pod-network.93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.512 [INFO][5342] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.512 [INFO][5342] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.517 [WARNING][5342] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" HandleID="k8s-pod-network.93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.517 [INFO][5342] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" HandleID="k8s-pod-network.93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Workload="localhost-k8s-coredns--674b8bbfcf--csjbt-eth0" Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.518 [INFO][5342] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:33.521894 env[1210]: 2025-07-15 11:32:33.519 [INFO][5333] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61" Jul 15 11:32:33.521894 env[1210]: time="2025-07-15T11:32:33.521847525Z" level=info msg="TearDown network for sandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\" successfully" Jul 15 11:32:33.525634 env[1210]: time="2025-07-15T11:32:33.525568048Z" level=info msg="RemovePodSandbox \"93e4a65fe26fa962cea7350de163a57dda83e0a312c6a2995b27650dfa593a61\" returns successfully" Jul 15 11:32:33.526167 env[1210]: time="2025-07-15T11:32:33.526089770Z" level=info msg="StopPodSandbox for \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\"" Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.558 [WARNING][5360] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0", GenerateName:"calico-apiserver-6ffb65f685-", Namespace:"calico-apiserver", SelfLink:"", UID:"c7061ccf-2f9c-4d34-9c87-a58c506705c4", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffb65f685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf", Pod:"calico-apiserver-6ffb65f685-bdghj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7318ccfe48d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.558 [INFO][5360] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.558 [INFO][5360] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" iface="eth0" netns="" Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.558 [INFO][5360] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.558 [INFO][5360] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.579 [INFO][5370] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" HandleID="k8s-pod-network.f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.580 [INFO][5370] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.580 [INFO][5370] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.586 [WARNING][5370] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" HandleID="k8s-pod-network.f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.586 [INFO][5370] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" HandleID="k8s-pod-network.f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.587 [INFO][5370] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:33.591348 env[1210]: 2025-07-15 11:32:33.589 [INFO][5360] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:33.592021 env[1210]: time="2025-07-15T11:32:33.591379649Z" level=info msg="TearDown network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\" successfully" Jul 15 11:32:33.592021 env[1210]: time="2025-07-15T11:32:33.591410980Z" level=info msg="StopPodSandbox for \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\" returns successfully" Jul 15 11:32:33.592068 env[1210]: time="2025-07-15T11:32:33.592041051Z" level=info msg="RemovePodSandbox for \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\"" Jul 15 11:32:33.592144 env[1210]: time="2025-07-15T11:32:33.592081941Z" level=info msg="Forcibly stopping sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\"" Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.622 [WARNING][5388] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0", GenerateName:"calico-apiserver-6ffb65f685-", Namespace:"calico-apiserver", SelfLink:"", UID:"c7061ccf-2f9c-4d34-9c87-a58c506705c4", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 31, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffb65f685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"32f4c8712d7d4c8ceaf2929687406cdb1e06d484761d08d597ac4f25168858bf", Pod:"calico-apiserver-6ffb65f685-bdghj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7318ccfe48d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.622 [INFO][5388] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.622 [INFO][5388] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" iface="eth0" netns="" Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.622 [INFO][5388] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.622 [INFO][5388] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.641 [INFO][5396] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" HandleID="k8s-pod-network.f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.641 [INFO][5396] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.641 [INFO][5396] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.647 [WARNING][5396] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" HandleID="k8s-pod-network.f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.648 [INFO][5396] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" HandleID="k8s-pod-network.f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Workload="localhost-k8s-calico--apiserver--6ffb65f685--bdghj-eth0" Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.649 [INFO][5396] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:33.653175 env[1210]: 2025-07-15 11:32:33.651 [INFO][5388] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c" Jul 15 11:32:33.653639 env[1210]: time="2025-07-15T11:32:33.653203920Z" level=info msg="TearDown network for sandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\" successfully" Jul 15 11:32:33.661983 env[1210]: time="2025-07-15T11:32:33.661934446Z" level=info msg="RemovePodSandbox \"f968e2b93eff778b284c5d8d311ed882b06ef0f1578112402af24269a076ab6c\" returns successfully" Jul 15 11:32:34.011000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:34.011000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0019866e0 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:32:34.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:34.011000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:34.011000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0015b1920 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:32:34.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:34.011000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:34.011000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002510560 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:32:34.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:34.011000 audit[1793]: AVC avc: denied { watch } for pid=1793 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:34.011000 audit[1793]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001986700 a2=fc6 a3=0 items=0 ppid=1657 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c91,c952 key=(null) Jul 15 11:32:34.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:37.847685 systemd[1]: Started sshd@15-10.0.0.76:22-10.0.0.1:58552.service. Jul 15 11:32:37.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.76:22-10.0.0.1:58552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:37.848850 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 15 11:32:37.848987 kernel: audit: type=1130 audit(1752579157.846:1528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.76:22-10.0.0.1:58552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:37.891000 audit[5405]: USER_ACCT pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:37.892474 sshd[5405]: Accepted publickey for core from 10.0.0.1 port 58552 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:37.895831 sshd[5405]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:37.894000 audit[5405]: CRED_ACQ pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:37.905643 systemd[1]: Started session-16.scope. Jul 15 11:32:37.905896 systemd-logind[1201]: New session 16 of user core. Jul 15 11:32:37.909551 kernel: audit: type=1101 audit(1752579157.891:1529): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:37.909609 kernel: audit: type=1103 audit(1752579157.894:1530): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:37.909629 kernel: audit: type=1006 audit(1752579157.894:1531): pid=5405 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 15 11:32:37.911887 kernel: audit: type=1300 audit(1752579157.894:1531): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8c0ae480 a2=3 a3=0 items=0 ppid=1 pid=5405 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:37.894000 audit[5405]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8c0ae480 a2=3 a3=0 items=0 ppid=1 pid=5405 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:37.915603 kernel: audit: type=1327 audit(1752579157.894:1531): proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:37.894000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:37.916871 kernel: audit: type=1105 audit(1752579157.908:1532): pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:37.908000 audit[5405]: USER_START pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:37.921144 kernel: audit: type=1103 audit(1752579157.909:1533): pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:37.909000 audit[5407]: CRED_ACQ pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:38.084746 sshd[5405]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:38.084000 audit[5405]: USER_END pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:38.087523 systemd[1]: sshd@15-10.0.0.76:22-10.0.0.1:58552.service: Deactivated successfully. Jul 15 11:32:38.088540 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:32:38.089391 systemd-logind[1201]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:32:38.090166 kernel: audit: type=1106 audit(1752579158.084:1534): pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:38.084000 audit[5405]: CRED_DISP pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:38.090327 systemd-logind[1201]: Removed session 16. Jul 15 11:32:38.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.76:22-10.0.0.1:58552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:38.094159 kernel: audit: type=1104 audit(1752579158.084:1535): pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:39.816756 kubelet[1964]: I0715 11:32:39.816704 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:32:39.835184 kubelet[1964]: I0715 11:32:39.835098 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-8kc9f" podStartSLOduration=35.412814693 podStartE2EDuration="50.835079898s" podCreationTimestamp="2025-07-15 11:31:49 +0000 UTC" firstStartedPulling="2025-07-15 11:32:16.646468433 +0000 UTC m=+44.340756269" lastFinishedPulling="2025-07-15 11:32:32.068733628 +0000 UTC m=+59.763021474" observedRunningTime="2025-07-15 11:32:32.664221851 +0000 UTC m=+60.358509697" watchObservedRunningTime="2025-07-15 11:32:39.835079898 +0000 UTC m=+67.529367744" Jul 15 11:32:39.849000 audit[5422]: NETFILTER_CFG table=filter:130 family=2 entries=9 op=nft_register_rule pid=5422 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:39.849000 audit[5422]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe4debf130 a2=0 a3=7ffe4debf11c items=0 ppid=2078 pid=5422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:39.849000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:39.855000 audit[5422]: NETFILTER_CFG table=nat:131 family=2 entries=31 op=nft_register_chain pid=5422 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:39.855000 audit[5422]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffe4debf130 a2=0 a3=7ffe4debf11c items=0 ppid=2078 pid=5422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:39.855000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:41.593879 systemd[1]: run-containerd-runc-k8s.io-8ae1b46fddf21be1f7d84c5de86d528551246beb1c5250fac824504ae1e78317-runc.0CmZFG.mount: Deactivated successfully. Jul 15 11:32:43.090082 systemd[1]: Started sshd@16-10.0.0.76:22-10.0.0.1:42342.service. Jul 15 11:32:43.091408 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:32:43.091448 kernel: audit: type=1130 audit(1752579163.089:1539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.76:22-10.0.0.1:42342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:43.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.76:22-10.0.0.1:42342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:43.131000 audit[5448]: USER_ACCT pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.132761 sshd[5448]: Accepted publickey for core from 10.0.0.1 port 42342 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:43.134883 sshd[5448]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:43.133000 audit[5448]: CRED_ACQ pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.138819 systemd-logind[1201]: New session 17 of user core. Jul 15 11:32:43.139666 systemd[1]: Started session-17.scope. Jul 15 11:32:43.140437 kernel: audit: type=1101 audit(1752579163.131:1540): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.140492 kernel: audit: type=1103 audit(1752579163.133:1541): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.140513 kernel: audit: type=1006 audit(1752579163.133:1542): pid=5448 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 15 11:32:43.133000 audit[5448]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe9f4b450 a2=3 a3=0 items=0 ppid=1 pid=5448 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:43.147702 kernel: audit: type=1300 audit(1752579163.133:1542): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe9f4b450 a2=3 a3=0 items=0 ppid=1 pid=5448 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:43.147753 kernel: audit: type=1327 audit(1752579163.133:1542): proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:43.133000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:43.143000 audit[5448]: USER_START pid=5448 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.153687 kernel: audit: type=1105 audit(1752579163.143:1543): pid=5448 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.153739 kernel: audit: type=1103 audit(1752579163.144:1544): pid=5450 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.144000 audit[5450]: CRED_ACQ pid=5450 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.289389 sshd[5448]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:43.289000 audit[5448]: USER_END pid=5448 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.292718 systemd-logind[1201]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:32:43.293052 systemd[1]: sshd@16-10.0.0.76:22-10.0.0.1:42342.service: Deactivated successfully. Jul 15 11:32:43.293747 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:32:43.294797 systemd-logind[1201]: Removed session 17. Jul 15 11:32:43.289000 audit[5448]: CRED_DISP pid=5448 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.298461 kernel: audit: type=1106 audit(1752579163.289:1545): pid=5448 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.298535 kernel: audit: type=1104 audit(1752579163.289:1546): pid=5448 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:43.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.76:22-10.0.0.1:42342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:48.286068 systemd[1]: Started sshd@17-10.0.0.76:22-10.0.0.1:44978.service. Jul 15 11:32:48.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.76:22-10.0.0.1:44978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:48.287503 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:32:48.287586 kernel: audit: type=1130 audit(1752579168.285:1548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.76:22-10.0.0.1:44978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:48.323000 audit[5462]: USER_ACCT pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.324379 sshd[5462]: Accepted publickey for core from 10.0.0.1 port 44978 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:48.327163 sshd[5462]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:48.325000 audit[5462]: CRED_ACQ pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.330725 systemd-logind[1201]: New session 18 of user core. Jul 15 11:32:48.331489 systemd[1]: Started session-18.scope. Jul 15 11:32:48.332823 kernel: audit: type=1101 audit(1752579168.323:1549): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.332888 kernel: audit: type=1103 audit(1752579168.325:1550): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.333118 kernel: audit: type=1006 audit(1752579168.325:1551): pid=5462 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 15 11:32:48.325000 audit[5462]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff81ec03d0 a2=3 a3=0 items=0 ppid=1 pid=5462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:48.341149 kernel: audit: type=1300 audit(1752579168.325:1551): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff81ec03d0 a2=3 a3=0 items=0 ppid=1 pid=5462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:48.341188 kernel: audit: type=1327 audit(1752579168.325:1551): proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:48.325000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:48.335000 audit[5462]: USER_START pid=5462 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.348656 kernel: audit: type=1105 audit(1752579168.335:1552): pid=5462 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.348702 kernel: audit: type=1103 audit(1752579168.336:1553): pid=5464 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.336000 audit[5464]: CRED_ACQ pid=5464 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.450385 sshd[5462]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:48.450000 audit[5462]: USER_END pid=5462 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.453699 systemd[1]: sshd@17-10.0.0.76:22-10.0.0.1:44978.service: Deactivated successfully. Jul 15 11:32:48.454448 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:32:48.455064 systemd-logind[1201]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:32:48.450000 audit[5462]: CRED_DISP pid=5462 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.456808 systemd[1]: Started sshd@18-10.0.0.76:22-10.0.0.1:44986.service. Jul 15 11:32:48.457846 systemd-logind[1201]: Removed session 18. Jul 15 11:32:48.460492 kernel: audit: type=1106 audit(1752579168.450:1554): pid=5462 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.460592 kernel: audit: type=1104 audit(1752579168.450:1555): pid=5462 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.76:22-10.0.0.1:44978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:48.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.76:22-10.0.0.1:44986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:48.496000 audit[5476]: USER_ACCT pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.498186 sshd[5476]: Accepted publickey for core from 10.0.0.1 port 44986 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:48.497000 audit[5476]: CRED_ACQ pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.497000 audit[5476]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda3540dc0 a2=3 a3=0 items=0 ppid=1 pid=5476 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:48.497000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:48.499219 sshd[5476]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:48.502684 systemd-logind[1201]: New session 19 of user core. Jul 15 11:32:48.503470 systemd[1]: Started session-19.scope. Jul 15 11:32:48.506000 audit[5476]: USER_START pid=5476 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:48.507000 audit[5478]: CRED_ACQ pid=5478 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:49.590513 sshd[5476]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:49.591000 audit[5476]: USER_END pid=5476 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:49.591000 audit[5476]: CRED_DISP pid=5476 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:49.593799 systemd[1]: sshd@18-10.0.0.76:22-10.0.0.1:44986.service: Deactivated successfully. Jul 15 11:32:49.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.76:22-10.0.0.1:44986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:49.594471 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:32:49.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.76:22-10.0.0.1:45000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:49.595159 systemd-logind[1201]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:32:49.596362 systemd[1]: Started sshd@19-10.0.0.76:22-10.0.0.1:45000.service. Jul 15 11:32:49.597235 systemd-logind[1201]: Removed session 19. Jul 15 11:32:49.633000 audit[5489]: USER_ACCT pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:49.634861 sshd[5489]: Accepted publickey for core from 10.0.0.1 port 45000 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:49.634000 audit[5489]: CRED_ACQ pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:49.634000 audit[5489]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe25100c60 a2=3 a3=0 items=0 ppid=1 pid=5489 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:49.634000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:49.635893 sshd[5489]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:49.638945 systemd-logind[1201]: New session 20 of user core. Jul 15 11:32:49.639887 systemd[1]: Started session-20.scope. Jul 15 11:32:49.642000 audit[5489]: USER_START pid=5489 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:49.643000 audit[5491]: CRED_ACQ pid=5491 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:50.929000 audit[5509]: NETFILTER_CFG table=filter:132 family=2 entries=20 op=nft_register_rule pid=5509 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:50.929000 audit[5509]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd5fa37170 a2=0 a3=7ffd5fa3715c items=0 ppid=2078 pid=5509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:50.929000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:50.935000 audit[5509]: NETFILTER_CFG table=nat:133 family=2 entries=26 op=nft_register_rule pid=5509 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:50.935000 audit[5509]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd5fa37170 a2=0 a3=0 items=0 ppid=2078 pid=5509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:50.935000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:50.943017 sshd[5489]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:50.942000 audit[5489]: USER_END pid=5489 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:50.942000 audit[5489]: CRED_DISP pid=5489 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:50.946775 systemd[1]: sshd@19-10.0.0.76:22-10.0.0.1:45000.service: Deactivated successfully. Jul 15 11:32:50.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.76:22-10.0.0.1:45000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:50.947595 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:32:50.949546 systemd[1]: Started sshd@20-10.0.0.76:22-10.0.0.1:45006.service. Jul 15 11:32:50.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.76:22-10.0.0.1:45006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:50.950474 systemd-logind[1201]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:32:50.951678 systemd-logind[1201]: Removed session 20. Jul 15 11:32:50.952000 audit[5514]: NETFILTER_CFG table=filter:134 family=2 entries=32 op=nft_register_rule pid=5514 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:50.952000 audit[5514]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffc8d821f0 a2=0 a3=7fffc8d821dc items=0 ppid=2078 pid=5514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:50.952000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:50.957000 audit[5514]: NETFILTER_CFG table=nat:135 family=2 entries=26 op=nft_register_rule pid=5514 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:50.957000 audit[5514]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7fffc8d821f0 a2=0 a3=0 items=0 ppid=2078 pid=5514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:50.957000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:50.997000 audit[5513]: USER_ACCT pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:50.998826 sshd[5513]: Accepted publickey for core from 10.0.0.1 port 45006 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:50.998000 audit[5513]: CRED_ACQ pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:50.998000 audit[5513]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc37458f50 a2=3 a3=0 items=0 ppid=1 pid=5513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:50.998000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:50.999996 sshd[5513]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:51.003698 systemd-logind[1201]: New session 21 of user core. Jul 15 11:32:51.004794 systemd[1]: Started session-21.scope. Jul 15 11:32:51.008000 audit[5513]: USER_START pid=5513 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.009000 audit[5516]: CRED_ACQ pid=5516 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.436574 sshd[5513]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:51.436000 audit[5513]: USER_END pid=5513 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.439326 systemd[1]: sshd@20-10.0.0.76:22-10.0.0.1:45006.service: Deactivated successfully. Jul 15 11:32:51.439875 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:32:51.436000 audit[5513]: CRED_DISP pid=5513 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.76:22-10.0.0.1:45006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:51.440482 systemd-logind[1201]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:32:51.441410 systemd[1]: Started sshd@21-10.0.0.76:22-10.0.0.1:45010.service. Jul 15 11:32:51.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.76:22-10.0.0.1:45010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:51.442498 systemd-logind[1201]: Removed session 21. Jul 15 11:32:51.484000 audit[5525]: USER_ACCT pid=5525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.485673 sshd[5525]: Accepted publickey for core from 10.0.0.1 port 45010 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:51.485000 audit[5525]: CRED_ACQ pid=5525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.485000 audit[5525]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec2a31830 a2=3 a3=0 items=0 ppid=1 pid=5525 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:51.485000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:51.487063 sshd[5525]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:51.490802 systemd-logind[1201]: New session 22 of user core. Jul 15 11:32:51.491685 systemd[1]: Started session-22.scope. Jul 15 11:32:51.493000 audit[5525]: USER_START pid=5525 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.495000 audit[5527]: CRED_ACQ pid=5527 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.615539 sshd[5525]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:51.615000 audit[5525]: USER_END pid=5525 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.615000 audit[5525]: CRED_DISP pid=5525 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:51.618218 systemd[1]: sshd@21-10.0.0.76:22-10.0.0.1:45010.service: Deactivated successfully. Jul 15 11:32:51.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.76:22-10.0.0.1:45010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:51.619008 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:32:51.619741 systemd-logind[1201]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:32:51.620446 systemd-logind[1201]: Removed session 22. Jul 15 11:32:52.405551 kubelet[1964]: E0715 11:32:52.405487 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:55.060777 kubelet[1964]: I0715 11:32:55.060718 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:32:55.172000 audit[5538]: NETFILTER_CFG table=filter:136 family=2 entries=32 op=nft_register_rule pid=5538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:55.174256 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 15 11:32:55.174301 kernel: audit: type=1325 audit(1752579175.172:1597): table=filter:136 family=2 entries=32 op=nft_register_rule pid=5538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:55.172000 audit[5538]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe62004f90 a2=0 a3=7ffe62004f7c items=0 ppid=2078 pid=5538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:55.181496 kernel: audit: type=1300 audit(1752579175.172:1597): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe62004f90 a2=0 a3=7ffe62004f7c items=0 ppid=2078 pid=5538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:55.181549 kernel: audit: type=1327 audit(1752579175.172:1597): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:55.172000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:55.189000 audit[5538]: NETFILTER_CFG table=nat:137 family=2 entries=38 op=nft_register_chain pid=5538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:55.189000 audit[5538]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffe62004f90 a2=0 a3=7ffe62004f7c items=0 ppid=2078 pid=5538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:55.197453 kernel: audit: type=1325 audit(1752579175.189:1598): table=nat:137 family=2 entries=38 op=nft_register_chain pid=5538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:32:55.197517 kernel: audit: type=1300 audit(1752579175.189:1598): arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffe62004f90 a2=0 a3=7ffe62004f7c items=0 ppid=2078 pid=5538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:55.197556 kernel: audit: type=1327 audit(1752579175.189:1598): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:55.189000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:55.396563 kubelet[1964]: E0715 11:32:55.396426 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:56.398405 kubelet[1964]: E0715 11:32:56.398370 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:32:56.619930 systemd[1]: Started sshd@22-10.0.0.76:22-10.0.0.1:45018.service. Jul 15 11:32:56.636702 kernel: audit: type=1130 audit(1752579176.618:1599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.76:22-10.0.0.1:45018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:56.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.76:22-10.0.0.1:45018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:56.661000 audit[5540]: USER_ACCT pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:56.663144 sshd[5540]: Accepted publickey for core from 10.0.0.1 port 45018 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:32:56.665000 audit[5540]: CRED_ACQ pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:56.667387 sshd[5540]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:56.670606 kernel: audit: type=1101 audit(1752579176.661:1600): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:56.670664 kernel: audit: type=1103 audit(1752579176.665:1601): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:56.671287 systemd-logind[1201]: New session 23 of user core. Jul 15 11:32:56.672100 systemd[1]: Started session-23.scope. Jul 15 11:32:56.673323 kernel: audit: type=1006 audit(1752579176.665:1602): pid=5540 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 15 11:32:56.665000 audit[5540]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6002a0d0 a2=3 a3=0 items=0 ppid=1 pid=5540 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:56.665000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:56.675000 audit[5540]: USER_START pid=5540 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:56.676000 audit[5542]: CRED_ACQ pid=5542 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:56.799702 sshd[5540]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:56.799000 audit[5540]: USER_END pid=5540 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:56.799000 audit[5540]: CRED_DISP pid=5540 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:32:56.802268 systemd[1]: sshd@22-10.0.0.76:22-10.0.0.1:45018.service: Deactivated successfully. Jul 15 11:32:56.802972 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:32:56.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.76:22-10.0.0.1:45018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:56.803475 systemd-logind[1201]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:32:56.804114 systemd-logind[1201]: Removed session 23. Jul 15 11:33:00.378000 audit[5575]: NETFILTER_CFG table=filter:138 family=2 entries=20 op=nft_register_rule pid=5575 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:00.380666 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:33:00.380728 kernel: audit: type=1325 audit(1752579180.378:1608): table=filter:138 family=2 entries=20 op=nft_register_rule pid=5575 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:00.378000 audit[5575]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff67b3ecc0 a2=0 a3=7fff67b3ecac items=0 ppid=2078 pid=5575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:00.387468 kernel: audit: type=1300 audit(1752579180.378:1608): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff67b3ecc0 a2=0 a3=7fff67b3ecac items=0 ppid=2078 pid=5575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:00.387526 kernel: audit: type=1327 audit(1752579180.378:1608): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:00.378000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:00.391000 audit[5575]: NETFILTER_CFG table=nat:139 family=2 entries=110 op=nft_register_chain pid=5575 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:00.391000 audit[5575]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7fff67b3ecc0 a2=0 a3=7fff67b3ecac items=0 ppid=2078 pid=5575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:00.400525 kernel: audit: type=1325 audit(1752579180.391:1609): table=nat:139 family=2 entries=110 op=nft_register_chain pid=5575 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:33:00.400576 kernel: audit: type=1300 audit(1752579180.391:1609): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7fff67b3ecc0 a2=0 a3=7fff67b3ecac items=0 ppid=2078 pid=5575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:00.400598 kernel: audit: type=1327 audit(1752579180.391:1609): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:00.391000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:33:01.804013 systemd[1]: Started sshd@23-10.0.0.76:22-10.0.0.1:33644.service. Jul 15 11:33:01.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.76:22-10.0.0.1:33644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:01.809212 kernel: audit: type=1130 audit(1752579181.803:1610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.76:22-10.0.0.1:33644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:01.846000 audit[5597]: USER_ACCT pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:01.848237 sshd[5597]: Accepted publickey for core from 10.0.0.1 port 33644 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:01.850733 sshd[5597]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:01.849000 audit[5597]: CRED_ACQ pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:01.854828 systemd-logind[1201]: New session 24 of user core. Jul 15 11:33:01.902027 kernel: audit: type=1101 audit(1752579181.846:1611): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:01.904420 kernel: audit: type=1103 audit(1752579181.849:1612): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:01.904505 kernel: audit: type=1006 audit(1752579181.849:1613): pid=5597 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 15 11:33:01.849000 audit[5597]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc597dc2b0 a2=3 a3=0 items=0 ppid=1 pid=5597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:01.849000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:01.857000 audit[5597]: USER_START pid=5597 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:01.859000 audit[5599]: CRED_ACQ pid=5599 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:01.855281 systemd[1]: Started session-24.scope. Jul 15 11:33:01.994022 sshd[5597]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:01.993000 audit[5597]: USER_END pid=5597 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:01.994000 audit[5597]: CRED_DISP pid=5597 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:01.996338 systemd[1]: sshd@23-10.0.0.76:22-10.0.0.1:33644.service: Deactivated successfully. Jul 15 11:33:01.997166 systemd[1]: session-24.scope: Deactivated successfully. Jul 15 11:33:01.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.76:22-10.0.0.1:33644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:01.997683 systemd-logind[1201]: Session 24 logged out. Waiting for processes to exit. Jul 15 11:33:01.998531 systemd-logind[1201]: Removed session 24. Jul 15 11:33:02.396805 kubelet[1964]: E0715 11:33:02.396761 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:06.998144 systemd[1]: Started sshd@24-10.0.0.76:22-10.0.0.1:33658.service. Jul 15 11:33:06.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.76:22-10.0.0.1:33658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:07.002193 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:33:07.002260 kernel: audit: type=1130 audit(1752579186.998:1619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.76:22-10.0.0.1:33658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:07.034000 audit[5610]: USER_ACCT pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.038843 sshd[5610]: Accepted publickey for core from 10.0.0.1 port 33658 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:07.048326 kernel: audit: type=1101 audit(1752579187.034:1620): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.048414 kernel: audit: type=1103 audit(1752579187.037:1621): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.048434 kernel: audit: type=1006 audit(1752579187.037:1622): pid=5610 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 15 11:33:07.048450 kernel: audit: type=1300 audit(1752579187.037:1622): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8e34de10 a2=3 a3=0 items=0 ppid=1 pid=5610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:07.037000 audit[5610]: CRED_ACQ pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.037000 audit[5610]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8e34de10 a2=3 a3=0 items=0 ppid=1 pid=5610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:07.039213 sshd[5610]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:07.050173 kernel: audit: type=1327 audit(1752579187.037:1622): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:07.037000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:07.053583 systemd[1]: Started session-25.scope. Jul 15 11:33:07.054847 systemd-logind[1201]: New session 25 of user core. Jul 15 11:33:07.058000 audit[5610]: USER_START pid=5610 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.062000 audit[5612]: CRED_ACQ pid=5612 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.067198 kernel: audit: type=1105 audit(1752579187.058:1623): pid=5610 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.067268 kernel: audit: type=1103 audit(1752579187.062:1624): pid=5612 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.178416 sshd[5610]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:07.178000 audit[5610]: USER_END pid=5610 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.181640 systemd[1]: sshd@24-10.0.0.76:22-10.0.0.1:33658.service: Deactivated successfully. Jul 15 11:33:07.182367 systemd[1]: session-25.scope: Deactivated successfully. Jul 15 11:33:07.178000 audit[5610]: CRED_DISP pid=5610 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.184749 systemd-logind[1201]: Session 25 logged out. Waiting for processes to exit. Jul 15 11:33:07.185435 systemd-logind[1201]: Removed session 25. Jul 15 11:33:07.188409 kernel: audit: type=1106 audit(1752579187.178:1625): pid=5610 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.188462 kernel: audit: type=1104 audit(1752579187.178:1626): pid=5610 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:07.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.76:22-10.0.0.1:33658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:08.398694 kubelet[1964]: E0715 11:33:08.398357 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:33:12.183535 systemd[1]: Started sshd@25-10.0.0.76:22-10.0.0.1:33950.service. Jul 15 11:33:12.206283 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:33:12.206345 kernel: audit: type=1130 audit(1752579192.182:1628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.76:22-10.0.0.1:33950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:12.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.76:22-10.0.0.1:33950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:12.226000 audit[5666]: USER_ACCT pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.228208 sshd[5666]: Accepted publickey for core from 10.0.0.1 port 33950 ssh2: RSA SHA256:UAnaMym03FNQ3Em4JmRfExsPnzWeaW932gzAKk7u+5w Jul 15 11:33:12.229617 sshd[5666]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:12.227000 audit[5666]: CRED_ACQ pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.239365 kernel: audit: type=1101 audit(1752579192.226:1629): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.239454 kernel: audit: type=1103 audit(1752579192.227:1630): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.239485 kernel: audit: type=1006 audit(1752579192.227:1631): pid=5666 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 15 11:33:12.241621 kernel: audit: type=1300 audit(1752579192.227:1631): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd592fe320 a2=3 a3=0 items=0 ppid=1 pid=5666 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.227000 audit[5666]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd592fe320 a2=3 a3=0 items=0 ppid=1 pid=5666 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.242606 systemd[1]: Started session-26.scope. Jul 15 11:33:12.278597 kernel: audit: type=1327 audit(1752579192.227:1631): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:12.278695 kernel: audit: type=1105 audit(1752579192.247:1632): pid=5666 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.227000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:12.247000 audit[5666]: USER_START pid=5666 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.292656 kernel: audit: type=1103 audit(1752579192.247:1633): pid=5668 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.247000 audit[5668]: CRED_ACQ pid=5668 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.243233 systemd-logind[1201]: New session 26 of user core. Jul 15 11:33:12.422818 sshd[5666]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:12.422000 audit[5666]: USER_END pid=5666 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.425293 systemd[1]: sshd@25-10.0.0.76:22-10.0.0.1:33950.service: Deactivated successfully. Jul 15 11:33:12.425966 systemd[1]: session-26.scope: Deactivated successfully. Jul 15 11:33:12.426588 systemd-logind[1201]: Session 26 logged out. Waiting for processes to exit. Jul 15 11:33:12.427301 systemd-logind[1201]: Removed session 26. Jul 15 11:33:12.422000 audit[5666]: CRED_DISP pid=5666 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.432528 kernel: audit: type=1106 audit(1752579192.422:1634): pid=5666 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.432587 kernel: audit: type=1104 audit(1752579192.422:1635): pid=5666 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:33:12.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.76:22-10.0.0.1:33950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'